Bugzilla 'time-tracking' Information Disclosure Vulnerability

Summary
Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6 Bugzilla 3.3.1 through 3.4.6 Bugzilla 3.5.1 through 3.6 Bugzilla 3.7
Solution
Updates are available. Please see the references for more information.
References