Application Security Scan performed on our application using IBM's AppScan standard tool and below issue has been reported. I am a .net developer, and unaware of these security terms. Could somebody please explain me how my application is vulnerable.
It is MVC Application and the framework is .Net.
Issue reported 'Direct Access to Administration Pages ,The web server or application server are configured in an insecure way.'
Reason: AppScan requested a file which is probably not a legitimate part of the application. The response status was 200 OK. This indicates that the test succeeded in retrieving the content of the requested file.