Description
This web application is configured with the serviceMetadata property httpGetEnabled / httpsGetEnabled set to true. When configured this way, the WCF service metadata (e.g. WSDL) will be publicly accessible.
Remediation
It's recommended to disable service metadata publishing by setting the serviceMetadata property httpGetEnabled / httpsGetEnabled to false.
<serviceMetadata httpGetEnabled="false" httpsGetEnabled="false" />