Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4905 matching apps · Counts below include only this page’s mapped finding types.
Wicked Clothes
co.tapcart.app.id_cFH3g4xvQvBuild 41 · 2026-10-13 12:57 UTC2 matching categories · 2 matching occurrences
ABG Smart Mobile
com.abg.fismobileBuild 26.08.00 · 2026-10-13 12:55 UTC2 matching categories · 2 matching occurrences
أدعية الحج 1447
com.ad3iyatManasik.hajjBuild 8.0 · 2026-10-13 12:54 UTC1 matching category · 1 matching occurrence
Sunrise Community Church
io.pushpay.sunrisecommunityBuild 15.7.0 · 2026-10-13 12:53 UTC1 matching category · 1261 matching occurrences
Debt Payoff Planner & Tracker
com.oxbowsoft.debtplannerBuild 2.54 · 2026-10-13 12:50 UTC2 matching categories · 2 matching occurrences
Newport Cliff Walk Audio Tour
com.actiontourguide.cliffwalkBuild 15.3 · 2026-10-13 12:49 UTC2 matching categories · 4 matching occurrences
Goppert FB Mobile Banking
com.csiweb.digitalbanking.bk0474Build 26.6.1 · 2026-10-13 12:47 UTC4 matching categories · 7 matching occurrences
petrolcard business
com.keepwarning.monobrandBuild 2.5.0 · 2026-10-13 12:45 UTC1 matching category · 1 matching occurrence
Bentonville West Wolverines
com.sidelineaccess.bwhsBuild 6.8.0 · 2026-10-13 12:44 UTC2 matching categories · 2 matching occurrences
Car Sim Japan
com.OppanaGames.Car.Sim.JapanBuild 1.13 · 2026-10-13 12:42 UTC1 matching category · 1 matching occurrence
Homework's Helper
com.escobar.ayudantedetareasBuild 1.36 · 2026-10-13 12:40 UTC2 matching categories · 2 matching occurrences
BigOven Recipes & Meal Planner
com.bigoven.androidBuild 6.2.62 · 2026-10-13 12:35 UTC2 matching categories · 2 matching occurrences
Padonia Portal
axis_android.axis_android.PadoniaBuild 26.257 · 2026-10-13 12:33 UTC2 matching categories · 2 matching occurrences
Zion KC
io.pushpay.esfirstexcelsiorspringsBuild 15.1.2 · 2026-10-13 12:32 UTC1 matching category · 1261 matching occurrences
HBNI Audio (Deprecated)
com.thecodingjsoftware.hutteritechurchBuild 2.4.3 · 2026-10-13 12:30 UTC1 matching category · 1 matching occurrence
Spring Valley Golf Club
com.gallusgolf.c1345.android.neoshogolfBuild 23.01.00 · 2026-10-13 12:29 UTC3 matching categories · 5 matching occurrences
PassKeep: Password Manager
com.redeyes.sspasswordsBuild 2.10.2 · 2026-10-13 12:27 UTC3 matching categories · 3 matching occurrences
Teriyaki Madness
com.teriyaki.appBuild 4.4 · 2026-10-13 12:26 UTC1 matching category · 1 matching occurrence
myWGU Mobile
edu.wgu.students.androidBuild 7.1.0 · 2026-10-13 12:24 UTC2 matching categories · 2 matching occurrences
Luckydog Day & Night Care
com.v4ec6962cd91.wwwBuild 1.0.27 · 2026-10-13 12:21 UTC1 matching category · 1 matching occurrence
CU Health Plan Move
com.fitdigits.becolorado.appBuild 12.014 · 2026-10-13 12:17 UTC3 matching categories · 22 matching occurrences
Chap: Chore Tracker
com.remedy.chapBuild 3.1.6 · 2026-10-13 12:13 UTC1 matching category · 1 matching occurrence
Prezzee eGift cards
com.prezzee.prezzeeBuild 3.14.1 · 2026-10-13 12:08 UTC2 matching categories · 2 matching occurrences
Access Bank Zambia
com.mode.atlasmaraBuild 1.58 · 2026-10-13 12:06 UTC2 matching categories · 2 matching occurrences
What Would Joel Do App
com.theexotech.wwjdBuild 2.2.3 · 2026-10-13 12:04 UTC2 matching categories · 4 matching occurrences