We have identified and fixed an information leakage vulnerability in Bamboo.
- An attacker will be able to view directory contents on the server if they are readable by the Bamboo user.
This issue is reported in our security advisory on this page:
http://confluence.atlassian.com/x/lwH6Dw