Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4920 matching apps · Counts below include only this page’s mapped finding types.
Ukulele Tuner - LikeTones
com.sonkins.tukuleleBuild 26.2.6 · 2026-10-13 08:05 UTC1 matching category · 3 matching occurrences
GIF Converter: Video & Bulk
com.nexdee.gifyardBuild 1.1.1 · 2026-10-13 08:02 UTC2 matching categories · 3 matching occurrences
Smart Connect
com.motorola.mobiledesktopBuild 09.0.3.013.0 · 2026-10-13 08:01 UTC1 matching category · 1 matching occurrence
NetworkFlow: Data & Speed
com.evozi.networkBuild 3.0.3 · 2026-10-13 07:59 UTC1 matching category · 1 matching occurrence
Box
com.box.androidBuild 7.5.625 · 2026-10-13 07:56 UTC2 matching categories · 2 matching occurrences
EveryPlate: Cooking Simplified
com.everyplate.androidBuild 26.41 · 2026-10-13 07:53 UTC3 matching categories · 25 matching occurrences
EseeCloud(IP Pro, VR Cam)
com.juanvision.eseecloud30Build 4.13.5.5 · 2026-10-13 07:51 UTC5 matching categories · 6 matching occurrences
Arknights: Endfield
com.gryphline.endfield.gpBuild 1.5.3 · 2026-10-13 07:47 UTC1 matching category · 1 matching occurrence
Trulia Rent Apartments & Homes
com.trulia.android.rentalsBuild 11.50.0 · 2026-10-13 07:44 UTC2 matching categories · 2 matching occurrences
Dragon Traveler
com.gametree.lhlr.gpBuild 1.17.0 · 2026-10-13 07:41 UTC1 matching category · 1 matching occurrence
Talkpal - AI Language Learning
ai.talkpalBuild 2.8.24 · 2026-10-13 07:37 UTC2 matching categories · 2 matching occurrences
Sleep Recorder Tracker Noxogy
com.apirox.sleeprecorderBuild 1.2.52 · 2026-10-13 07:35 UTC2 matching categories · 2 matching occurrences
Southwest Airlines: Travel App
com.southwestairlines.mobileBuild 13.20.0 · 2026-10-13 07:34 UTC2 matching categories · 2 matching occurrences
Let's Meditate: Relax & Sleep
com.meditation.elevenminuteBuild 3.0 · 2026-10-13 07:32 UTC2 matching categories · 4 matching occurrences
Beach Buggy Racing
com.vectorunit.purple.googleplayBuild 2026.10.07 · 2026-10-13 07:31 UTC2 matching categories · 2 matching occurrences
TextNow: Call + Text Unlimited
com.enflick.android.TextNowBuild 26.40.1.0 · 2026-10-13 07:29 UTC4 matching categories · 11 matching occurrences
Moj: Free Short Drama & Reels
in.mohalla.videoBuild 2026.32.2 · 2026-10-13 07:27 UTC3 matching categories · 3 matching occurrences
Bitcoin Heroes: Fantasy RPG
com.tapanywhere.lootheroesBuild 1.26.2 · 2026-10-13 07:23 UTC3 matching categories · 4 matching occurrences
Wendy’s
com.wendys.nutritiontoolBuild 11.61.0 · 2026-10-13 07:17 UTC3 matching categories · 5 matching occurrences
foodpanda: food & groceries
com.global.foodpanda.androidBuild 26.40.2 · 2026-10-13 07:15 UTC2 matching categories · 4 matching occurrences
ESPN
com.espn.score_centerBuild 8.27.0 · 2026-10-13 07:13 UTC4 matching categories · 4 matching occurrences
Family budget—Spending tracker
com.colpit.diamondcoming.isavemoneygoBuild 8.3.5 · 2026-10-13 07:11 UTC3 matching categories · 5 matching occurrences
Quicken: Budget & Track Money
com.quicken.acmeBuild 6.40.0 · 2026-10-13 07:10 UTC3 matching categories · 3 matching occurrences
HiOS Launcher - Fast
com.transsion.hilauncherBuild 13.9.050.2 · 2026-10-13 07:06 UTC4 matching categories · 5 matching occurrences