Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4905 matching apps · Counts below include only this page’s mapped finding types.
Piano Pop Music 2
evolution.music.tiles.challengeBuild 1.0.42 · 2026-10-13 14:53 UTC3 matching categories · 4 matching occurrences
EPFCU CardControl
com.a840510925.wallet.cardcontrolBuild 3.12.2 · 2026-10-13 14:51 UTC1 matching category · 2 matching occurrences
Reels
com.mohit_jadav.reels_appBuild 1.0.0 · 2026-10-13 14:46 UTC2 matching categories · 4 matching occurrences
My Total Wireless: Account App
com.tracfone.total.myaccountBuild R31.0.0 · 2026-10-13 14:45 UTC3 matching categories · 3 matching occurrences
Community Tax
com.community.taxBuild 2.4.1 · 2026-10-13 14:43 UTC1 matching category · 1 matching occurrence
Simple Contacts
com.simplemobiletools.contactsBuild 6.1.5.1 · 2026-10-13 14:42 UTC2 matching categories · 2 matching occurrences
اجمل اناشيد دينية 2026 بدونت
com.freeapp.songs_alshab_muradBuild 3.19 · 2026-10-13 14:40 UTC1 matching category · 2 matching occurrences
Mitti (by SafetyCulture)
com.safetyculture.iauditorBuild 26.40 · 2026-10-13 14:39 UTC3 matching categories · 3 matching occurrences
Fluent Forever:Speak Languages
com.fluentforever.fluentappBuild 1.0.137 · 2026-10-13 14:33 UTC2 matching categories · 5 matching occurrences
Screen Recorder Pro: Capture
biz.cloudex.android.screenrecorderproBuild 1.0.1 · 2026-10-13 14:30 UTC1 matching category · 1 matching occurrence
Tencent Video
com.tencent.qqlivei18n.usBuild 5.39.0.18440 · 2026-10-13 14:29 UTC4 matching categories · 4 matching occurrences
Anytime Telecare
com.anytimepediatric.anytimetelemedicineBuild 2.43.0 · 2026-10-13 14:25 UTC1 matching category · 1 matching occurrence
Learn Cryptography
cryptography.encryption.learn.coding.programming.security.cryptoBuild 4.2.89 · 2026-10-13 14:22 UTC3 matching categories · 8 matching occurrences
Rational Training App
de.rational.android.rationalukBuild 2.5 · 2026-10-13 14:21 UTC2 matching categories · 2 matching occurrences
FunTagg
com.funtagg.funtaggBuild 1.9.14 · 2026-10-13 14:19 UTC1 matching category · 2 matching occurrences
Instituto Hesed
com.institutohesed.appBuild 1.90.0 · 2026-10-13 14:18 UTC1 matching category · 2 matching occurrences
Quran Bangla
com.QuranReading.quranbanglaBuild 4.9 · 2026-10-13 14:16 UTC1 matching category · 9 matching occurrences
DPAC
com.venuenext.dpacBuild 4.4.20 · 2026-10-13 14:14 UTC1 matching category · 1 matching occurrence
Inness Golf
com.gallusgolf.c1398.android.innessnyBuild 23.01.00 · 2026-10-13 14:11 UTC2 matching categories · 4 matching occurrences
Lee Events
events.socio.app2256Build 47.0.0 · 2026-10-13 14:07 UTC2 matching categories · 2 matching occurrences
REAL Primary Care 2026
com.aventri.omtechnologysummit202219931Build 1.5 · 2026-10-13 14:06 UTC2 matching categories · 2 matching occurrences
RCBC DiskarTech Savings
com.diskartech.mobileBuild 2026.4.0 · 2026-10-13 14:04 UTC2 matching categories · 2 matching occurrences
Doft Load Board & Truck Loads
com.doft.android.carrierBuild 3.21.8 · 2026-10-13 14:02 UTC2 matching categories · 2 matching occurrences
TrueVine Christian Dating Meet
world.photo.socialBuild 4.31.0 · 2026-10-13 13:56 UTC3 matching categories · 10 matching occurrences