Description
One or more possibly sensitive directories were found. These resources are not directly linked from the website. This check looks for common sensitive resources like backup directories, database dumps, administration pages, temporary directories. Each one of these directories could help an attacker to learn more about his target.
Remediation
Restrict access to these directories or remove them from the website.
References
Related Vulnerabilities
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
WordPress Plugin Clone Information Disclosure (2.4.2)
IBM Web Content Manager XPath injection
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5730)
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)