Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
5126 matching apps · Counts below include only this page’s mapped finding types.
GearUP: Lower Lag Game Booster
com.gearup.boosterBuild 4.0.5 · 2026-09-11 09:27 UTC1 matching category · 1 matching occurrence
Bumble Dating App: Meet & Date
com.bumble.appBuild 5.483.0 · 2026-09-11 07:35 UTC3 matching categories · 3 matching occurrences
Stir: Single Parent Dating App
com.match.android.stirBuild 25.08.02 · 2026-09-11 05:59 UTC2 matching categories · 2 matching occurrences
Bodybuilding Warehouse
co.tapcart.app.id_1n6OtpCT2mBuild 15 · 2026-09-11 05:21 UTC2 matching categories · 2 matching occurrences
Dank’s Warehouse
com.digitalawesome.danksBuild 1.0.4 · 2026-09-11 05:03 UTC1 matching category · 3 matching occurrences
Narco Empire
com.spark.sp.gpBuild 1.0.41 · 2026-09-11 04:30 UTC1 matching category · 1 matching occurrence
KartRider Rush+
com.nexon.kartBuild 1.40.8 · 2026-09-08 17:26 UTC1 matching category · 1 matching occurrence
Meme Generator Plus
com.zombodroid.memegenplusBuild 2.0.507 · 2026-09-08 01:35 UTC2 matching categories · 2 matching occurrences
CAD Editor-DWG Viewer &Convert
net.cadeditor.appBuild 0.3.0 · 2026-09-07 13:47 UTC1 matching category · 1 matching occurrence
Amazon Flex
com.amazon.flex.rabbitBuild 3.141.2.93.0 · 2026-09-07 09:46 UTC2 matching categories · 5 matching occurrences
Fubo: Watch Live TV & Sports
tv.fubo.mobileBuild 5.58.0 · 2026-09-07 09:13 UTC2 matching categories · 4 matching occurrences
HookUp & Casual Dating App CSL
com.jaumo.casualBuild 202607.1.2 · 2026-09-07 02:55 UTC2 matching categories · 2 matching occurrences
Tinder Dating App: Chat & Date
com.tinderBuild 17.32.6 · 2026-09-07 02:16 UTC2 matching categories · 3 matching occurrences
Chatspin Random Video Chat Duo
com.ChatspinBuild 5.1.8 · 2026-09-07 00:51 UTC2 matching categories · 2 matching occurrences
Taptap Send: Money Transfer
com.taptapsendBuild 2.95.0 · 2026-09-07 00:48 UTC2 matching categories · 4 matching occurrences
Tigo-Live Video Chat&More
com.tigo.flowerBuild 3.4.5 · 2026-09-06 16:16 UTC1 matching category · 1 matching occurrence
Fast Budget - Expense Manager
com.blodhgard.easybudgetBuild 7.1.0 · 2026-09-06 13:44 UTC2 matching categories · 4 matching occurrences
NovelToon: Read Books, Stories
mobi.mangatoon.novel.portugueseBuild 3.38.02 · 2026-09-05 19:50 UTC3 matching categories · 3 matching occurrences
Session - Private Messenger
network.loki.messengerBuild 1.33.5 · 2026-09-05 17:23 UTC1 matching category · 1 matching occurrence
Telegram X
org.thunderdog.challegramBuild 0.28.3.1785-arm64-v8a · 2026-09-05 14:42 UTC2 matching categories · 3 matching occurrences
Robinhood: Trading & Investing
com.robinhood.androidBuild 2026.35.6 · 2026-09-05 13:26 UTC3 matching categories · 9 matching occurrences
Dreame-Read Romance Stories
com.dreame.readerBuild 5.30.1 · 2026-09-04 13:26 UTC3 matching categories · 6 matching occurrences
Tango: Live Stream, Video Chat
com.sgiggle.productionBuild 9.75.7 · 2026-09-04 11:03 UTC5 matching categories · 7 matching occurrences
Asphalt Legends - Racing Game
com.gameloft.android.ANMP.GloftA9HMBuild 52.1.2a · 2026-09-04 09:12 UTC2 matching categories · 2 matching occurrences