Hidden File Found - Medium

[Nathan]

Hi In our recent owasp report we have had a vulnerability that says the following.

Hidden File Found
A sensitive file was identified as accessible or available. This may leak administrative, configuration, or credential information which can be leveraged by a malicious individual to further attack the system or conduct social engineering efforts.

It says in the report  HTTP/1.1 301 Moved Permanently 

When we click on the links the files don't exist we just get a 404 page saying "page not found"
we use a wordpress theme.
is says it's at the root of the domain name where the website theme is. We are able to view all hidden files on the site however we are unable to see them.

Is that saying that if the files were there they would be accessible or available?

Any help on this would be great. I have attached a screenshot.

[Simon Bennetts]

Hiya,

Can you share one of the full responses.

Feel free to onfuscate any sensitive information.

Many thanks,

Simon

[Nathan]

Hi when you say a full response what do you mean? A full report? I have attached another screenshot of the full vulnerability.

Thanks

[Simon Bennetts]

The full HTTP response for one of the requests flagged, including the header and body.