BMC BladeLogic Server Automation versions 8.7 and below suffer from an unauthenticated arbitrary directory dumping vulnerability.