Bugzilla versions 2.18, 2.19.2, and 2.16.8 suffer from information disclosure and and password leak flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39139/bugzillaFlaws.txt
Source: https://packetstormsecurity.com/files/39139/bugzillaFlaws.txt.html