Security Test: High number of PII¶

Scanner(s) Support¶

Description¶

Default Severity: medium

When access control is not properly implemented, some PII can leak to the public. It may lead to data breaches, financial loss and even legal penalties.

Reference:

• https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html

Configuration¶

Identifier: information_disclosure/high_number_of_pii

Examples¶

All configuration available:

checks:
  information_disclosure/high_number_of_pii:
    skip: false # default

Compliance and Standards¶