Security Test: High number of PHI¶

Scanner(s) Support¶

Description¶

Default Severity: high

When access control is not properly implemented, some PHI can leak to the public. It may lead to data breaches, financial loss, legal penalties, and HIPAA violations.

Configuration¶

Identifier: information_disclosure/high_number_of_phi

Examples¶

All configuration available:

checks:
  information_disclosure/high_number_of_phi:
    skip: false # default
    options:
      phi_threshold: 4 # default

Options¶

Options can be set in the options key of the Security Test Configuration.

Compliance and Standards¶