DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/16673http://www.securityfocus.com/bid/10698http://marc.info/?l=bugtraq&m=108965446813639&w=2
