Security Test: High number of PCI¶

Scanner(s) Support¶

Description¶

Default Severity: high

When access control is not properly implemented, some payment card information (PCI) can leak to the public. It may lead to data breaches, financial loss, regulatory violations, and severe legal penalties including PCI DSS non-compliance.

Configuration¶

Identifier: sensitive_data/high_number_of_pci

Examples¶

All configuration available:

checks:
  sensitive_data/high_number_of_pci:
    skip: false # default
    options:
      detection_threshold: 1 # default

Increase the Detection Threshold

 checks:
   information_disclosure/high_number_of_pci:
     options:
       detection_threshold: 10

Options¶

Options can be set in the options key of the Security Test Configuration.

Compliance and Standards¶