I found that in several websites,
[HOSTNAME]/phpmyadmin/setup/index.php is accessible by default without authentication. However, it seems impossible to modify anything or to do security damage. Also, the website database is not accessible via this panel.
Is there any security risk with that? If not, what is the purpose of such thing?