Specifically, in blog/inc/_misc/_db.class.php, lines 304 - 326.

These lines will print out the username and hostname/internal IP address of your database server in the event that B2Evo can't connect, which is an exposure of sensitive information.