Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
5015 matching apps · Counts below include only this page’s mapped finding types.
Zillow: Homes for Sale & Rent
com.zillow.android.zillowmapBuild 2026.76.1.134858 · 2026-10-12 15:18 UTC2 matching categories · 2 matching occurrences
StudyFetch: AI Tutor
com.studyfetch.mobile.v2Build 301.8.369 · 2026-10-12 15:15 UTC1 matching category · 59 matching occurrences
SipLingo: Learn & Speak German
ch.zgdevelopment.siplingoBuild 1.5.2 · 2026-10-12 15:13 UTC1 matching category · 2 matching occurrences
WallpaperZ - 8K Wallpapers
com.zoneoftech.wallpaperBuild 4.0.3 · 2026-10-12 15:12 UTC1 matching category · 3 matching occurrences
Sony LIV: Series, Shows, Movie
com.sonylivBuild 6.38.18 · 2026-10-12 15:10 UTC5 matching categories · 8 matching occurrences
Go Huskies
com.img.android.washingtonBuild 183.0.10 · 2026-10-12 15:09 UTC2 matching categories · 4 matching occurrences
Locals Barber Shop
mobi.barberly.localsbarberBuild 27.0.1 · 2026-10-12 15:06 UTC1 matching category · 1 matching occurrence
LionVPN master security vpn
com.vpn.peervpnBuild 4.7.21 · 2026-10-12 15:04 UTC1 matching category · 1 matching occurrence
Royal Match
com.dreamgames.royalmatchBuild 38911 · 2026-10-12 15:03 UTC3 matching categories · 3 matching occurrences
Garmin Connect™
com.garmin.android.apps.connectmobileBuild 5.30.1 · 2026-10-12 15:01 UTC4 matching categories · 11 matching occurrences
WhatsApp Business
com.whatsapp.w4bBuild 2.26.39.72 · 2026-10-12 14:59 UTC2 matching categories · 8 matching occurrences
Fun Habit - Habit Tracker
com.habits.todolist.plan.wishBuild 3.0.15 · 2026-10-12 14:57 UTC2 matching categories · 2 matching occurrences
Gymverse: Gym Workout Planner
com.fitness22.workoutBuild 6.5700 · 2026-10-12 14:55 UTC4 matching categories · 8 matching occurrences
Avenza Maps: Offline Mapping
com.AvenzaBuild 5.8 · 2026-10-12 14:50 UTC3 matching categories · 5 matching occurrences
GoodRx: Prescription Coupons
com.goodrxBuild 9.20.0 · 2026-10-12 14:46 UTC2 matching categories · 2 matching occurrences
Origin: AI Budget & Track
com.useorigin.employee.androidBuild 4.15.2 · 2026-10-12 14:44 UTC1 matching category · 1 matching occurrence
E*TRADE: Invest. Trade. Save.
com.etrade.mobilepro.activityBuild 13.5.1.10950 · 2026-10-12 14:43 UTC2 matching categories · 3 matching occurrences
Facemoji AI Emoji Keyboard
com.simejikeyboardBuild 3.7.0 · 2026-10-12 14:41 UTC3 matching categories · 5 matching occurrences
Hidden Spy Camera Detector Pro
com.ender.spycameraBuild 5.0.1 · 2026-10-12 14:40 UTC1 matching category · 3 matching occurrences
TurboScan™: PDF scanner
com.piksoft.turboscan.freeBuild 1.7.3 · 2026-10-12 14:37 UTC3 matching categories · 3 matching occurrences
Solid Explorer File Manager
pl.solidexplorer2Build 3.6.1 · 2026-10-12 14:36 UTC2 matching categories · 2 matching occurrences
ColorNote Notepad Notes
com.socialnmobile.dictapps.notepad.color.noteBuild 4.8.8 · 2026-10-12 14:34 UTC3 matching categories · 6 matching occurrences
Waldo Photos
com.waldophotos.androidBuild 13.22.0 · 2026-10-12 14:33 UTC3 matching categories · 3 matching occurrences
GoodNovel - Booktok, Stories
com.read.goodnovelBuild 4.4.0.1350 · 2026-10-12 14:32 UTC2 matching categories · 4 matching occurrences
ProCCD - Digital Film Camera
com.cerdillac.proccdBuild 5.0.0 · 2026-10-12 14:28 UTC1 matching category · 1 matching occurrence