Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
5124 matching apps · Counts below include only this page’s mapped finding types.
Telegram
org.telegram.messengerBuild 12.10.5 · 2026-09-30 11:09 UTC3 matching categories · 3 matching occurrences
The Grand Mafia
com.yottagames.gameofmafiaBuild 1.5.338 · 2026-09-30 06:23 UTC3 matching categories · 3 matching occurrences
Dating.com: Online Dating App
com.dating.androidBuild 7.906.0 · 2026-09-29 19:23 UTC2 matching categories · 4 matching occurrences
Badoo Dating App: Meet & Date
com.badoo.mobileBuild 5.482.0 · 2026-09-29 11:28 UTC3 matching categories · 3 matching occurrences
Afterpay: Pay over time
com.afterpaymobile.usBuild 1.145.0 · 2026-09-29 06:39 UTC3 matching categories · 9 matching occurrences
Bravo - Live Stream TV Shows
com.nbcu.tve.bravoBuild 9.31.1 · 2026-09-28 20:53 UTC3 matching categories · 5 matching occurrences
Capital One Shopping
com.wikibuy.prod.mainBuild 2.153.0 · 2026-09-28 18:44 UTC2 matching categories · 2 matching occurrences
Diablo Immortal
com.blizzard.diablo.immortalBuild 5.1.2 · 2026-09-28 15:05 UTC1 matching category · 1 matching occurrence
Omega - Live video chat
ly.omegle.androidBuild 7.5.0 · 2026-09-28 13:40 UTC3 matching categories · 3 matching occurrences
happn: dating app
com.ftw_and_co.happnBuild 2026.19.0 · 2026-09-28 02:11 UTC4 matching categories · 9 matching occurrences
Equity247
com.callequity.equity247Build 1.3.3 · 2026-09-28 01:00 UTC2 matching categories · 2 matching occurrences
Chelo's
com.paytronix.client.android.app.ChelosBuild 25.21.2025090501 · 2026-09-28 00:27 UTC1 matching category · 1 matching occurrence
X
com.twitter.androidBuild 12.29.1-prod.01 · 2026-09-26 23:50 UTC2 matching categories · 2 matching occurrences
Midnight Stories: Love Choices
com.DefaultCompany.MidnightstoriesBuild 2.1.3 · 2026-09-26 23:01 UTC3 matching categories · 3 matching occurrences
Gallery
com.gallery.pictures.photogalleryBuild 1.7 · 2026-09-26 17:07 UTC1 matching category · 2 matching occurrences
Siberalem: Arkadaşlık & Sohbet
com.workbench.siberalemBuild 6.1.16 · 2026-09-26 12:13 UTC3 matching categories · 3 matching occurrences
Live Video Call - Live chat
gallery.app.silicon.photosvideoBuild 4.5 · 2026-09-26 11:43 UTC1 matching category · 1 matching occurrence
PawAI: AI Cartoon Pet Filter
com.pawai.aifilter.aiimagegenerator.cartoonify.aicartoonBuild 53 · 2026-09-26 05:42 UTC1 matching category · 1 matching occurrence
Defense legend 4 HD: Sci-fi TD
com.Gcenter.Defenselegend4.HD.TowerDefense.TDBuild 5.1 · 2026-09-25 07:28 UTC3 matching categories · 3 matching occurrences
OPay - Send Money Fast
team.opay.pay.pakistanBuild 2.0.25.32 · 2026-09-25 04:21 UTC2 matching categories · 4 matching occurrences
mewe: The Safe Network
com.meweBuild 9.0.25.1 · 2026-09-24 22:45 UTC2 matching categories · 2 matching occurrences
Tumblr: Social Media & Art
com.tumblrBuild 46.3.0.110 · 2026-09-23 16:57 UTC2 matching categories · 2 matching occurrences
Koer: Afrikaanse Dating App
za.co.koer.appBuild 3.4.1 · 2026-09-23 14:14 UTC2 matching categories · 2 matching occurrences
JMU Grad
com.u360mobile.jmuBuild 3.1 · 2026-09-23 08:34 UTC2 matching categories · 2 matching occurrences
Tiff's Treats
com.tiffstreats.cookiedeliveryBuild v6.1.0 · 2026-09-22 22:42 UTC3 matching categories · 3 matching occurrences