Description
This web application is configured with the localServiceSettings property detectReplays set to false. When configured this way, the WCF service is not protected against replay attacks (replaying messages between the client and service or vice versa).
Remediation
It's recommended to enable message replay detection by setting the localServiceSettings property detectReplays to true.
<localServiceSettings detectReplays="true" />