Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
5125 matching apps · Counts below include only this page’s mapped finding types.
Tiff's Treats
com.tiffstreats.cookiedeliveryBuild v6.1.0 · 2026-09-22 22:42 UTC3 matching categories · 3 matching occurrences
緣圈 - 每日16名配對交友
com.endressdreamtw.lovetingBuild 8.1.21 · 2026-09-22 20:58 UTC3 matching categories · 10 matching occurrences
TAPinto.net
net.tapinto.appBuild 1.0.0 · 2026-09-22 15:13 UTC1 matching category · 9 matching occurrences
[VIP] Mr. Balcan Idle
com.superclay.vipbalcanBuild 1.408 · 2026-09-22 02:10 UTC2 matching categories · 5 matching occurrences
Muhabbat Shayari - محبت شاعری
com.elytelabs.muhabbatshayariBuild 2.1 · 2026-09-20 22:32 UTC1 matching category · 1 matching occurrence
Sudoku Master Premium: Offline
com.ANOOGAMES.SudokuMasterPremiumOfflineBuild 3.8 · 2026-09-20 07:25 UTC1 matching category · 1 matching occurrence
Memes.com + Memes Maker
com.memes.plusBuild 3.2.16 · 2026-09-20 03:09 UTC3 matching categories · 3 matching occurrences
Futebol da Copa
camara.worldcup.copadomundoBuild 3.3.0 · 2026-09-19 20:16 UTC1 matching category · 1 matching occurrence
شات عربي - دردشة تعارف وتسلية
chat.arabic.arabicapkBuild 12.35 · 2026-09-19 11:40 UTC2 matching categories · 2 matching occurrences
Green Entrepreneur
com.maz.combo1987Build 16.0 · 2026-09-19 07:18 UTC3 matching categories · 3 matching occurrences
Anify: Anime, Manga & Novels
com.cleanstack.anifyBuild Satori 1.9 · 2026-09-19 03:03 UTC1 matching category · 1 matching occurrence
Свои Плюсы Едадил — кешбэк
com.edadeal.androidBuild 26.36.0 · 2026-09-19 02:28 UTC3 matching categories · 5 matching occurrences
Chai: Chat AI Platform
com.Beauchamp.Messenger.externalBuild 0.4.417 · 2026-09-18 12:40 UTC3 matching categories · 14 matching occurrences
OkCupid Dating: Date Singles
com.okcupid.okcupidBuild 116.0.0 · 2026-09-18 10:16 UTC2 matching categories · 4 matching occurrences
Grocery Outlet Bargain Market
com.groceryoutlet.loyaltyappBuild 7.2.0 (732) · 2026-09-18 09:59 UTC1 matching category · 1 matching occurrence
Everand: Audiobooks & Ebooks
com.scribd.app.reader0Build 16.22 · 2026-09-18 07:07 UTC2 matching categories · 4 matching occurrences
Tipsy Chat: Live Your Story
com.tipsyturbo.appBuild 1.4.8 · 2026-09-18 03:54 UTC1 matching category · 1 matching occurrence
Sandstorm: Meme Maker
fun.sandstormBuild 1.12.103 · 2026-09-17 21:52 UTC1 matching category · 1 matching occurrence
DJ Music mixer - DJ Studio Pro
dj.mixer.djmusicmixer.effects.proBuild 1.2.0 · 2026-09-17 16:49 UTC1 matching category · 1 matching occurrence
Scan to Note
com.berrywing.scantonoteBuild 8.2.2 · 2026-09-17 16:17 UTC2 matching categories · 2 matching occurrences
The NBC App - Stream TV Shows
com.nbcuni.nbcBuild 9.31.1 · 2026-09-17 12:18 UTC3 matching categories · 5 matching occurrences
I Am Sober
com.thehungrywasp.iamsoberBuild 8.7.9 · 2026-09-17 12:07 UTC3 matching categories · 26 matching occurrences
MadOut 2: Grand Auto Racing
com.MadOut.BIGBuild 20.47 · 2026-09-17 07:14 UTC2 matching categories · 3 matching occurrences
Measure Map Pro
com.globaldpi.measuremapliteBuild 9.2.0 · 2026-09-17 04:40 UTC2 matching categories · 2 matching occurrences