Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4920 matching apps · Counts below include only this page’s mapped finding types.
Sygic: GPS Navigation & Maps
com.sygic.auraBuild 26.5.5-119142 · 2026-10-13 01:57 UTC2 matching categories · 6 matching occurrences
Overly
com.Overly.CloudBuild 1.7.6 · 2026-10-13 01:55 UTC2 matching categories · 2 matching occurrences
SMART Estimator App
com.smartestimator.appBuild 5.0 · 2026-10-13 01:52 UTC2 matching categories · 2 matching occurrences
Booksy Biz: For Businesses
net.booksy.businessBuild 26.10.0800 · 2026-10-13 01:49 UTC3 matching categories · 5 matching occurrences
Zoho Invoice - Invoice Maker
com.zoho.invoiceBuild 6.4.29 · 2026-10-13 01:46 UTC2 matching categories · 2 matching occurrences
Expensify - Travel & Expense
org.me.mobiexpensifygBuild 9.5.5-2 · 2026-10-13 01:44 UTC3 matching categories · 23 matching occurrences
HDFC Bank App: Banking & Cards
com.hdfcbank.android.nowBuild 11.1.0 · 2026-10-13 01:42 UTC1 matching category · 3 matching occurrences
The Weather Network
com.pelmorex.WeatherEyeAndroidBuild 8.0.0.12247 · 2026-10-13 01:38 UTC2 matching categories · 4 matching occurrences
English Dictionary Max
com.innovmaven.englishdictionarymaxBuild 1.0.24 · 2026-10-13 01:37 UTC1 matching category · 2 matching occurrences
Face Meme Maker
com.appsrox.facexBuild 8.3 · 2026-10-13 01:35 UTC2 matching categories · 2 matching occurrences
Podcast Studio
com.spreaker.android.studioBuild 1.34.8 · 2026-10-13 01:31 UTC3 matching categories · 3 matching occurrences
Video Editor & Maker VideoShow
com.xvideostudio.videoeditorBuild 11.0.7.3 · 2026-10-13 01:29 UTC4 matching categories · 4 matching occurrences
Microsoft Authenticator
com.azure.authenticatorBuild 6.2609.6214 · 2026-10-13 01:27 UTC1 matching category · 2 matching occurrences
SAP Field Service Management
com.sap.fsmBuild 26.09.0 · 2026-10-13 01:26 UTC2 matching categories · 2 matching occurrences
Receipt Scanner
zazmic.at.invoice_parserBuild 1.0.0 · 2026-10-13 01:23 UTC1 matching category · 2 matching occurrences
Nest
com.nest.androidBuild 5.88.0.2 · 2026-10-13 01:22 UTC3 matching categories · 4 matching occurrences
Live Translator: Arc Translate
com.codeway.translatorappBuild 1.0.2 · 2026-10-13 01:20 UTC2 matching categories · 4 matching occurrences
Memepop - AI Meme Maker
fun.memepop.sideBuild 0.0.7 · 2026-10-13 01:15 UTC1 matching category · 1 matching occurrence
Backup & Restore Messages
com.backup.chat.restore.messagesBuild 1.0.17 · 2026-10-13 01:12 UTC1 matching category · 2 matching occurrences
GameCam - Game Screen Recorder
com.gamecam.gamerecorderBuild 1.0.7 · 2026-10-13 01:09 UTC1 matching category · 1 matching occurrence
PlantTAGG Plant Care Gardening
com.planttagg.mobileBuild 4.1.8 · 2026-10-13 00:57 UTC1 matching category · 1 matching occurrence
Fuel Rewards® program
com.excentus.frn.androidBuild 3.25.0 · 2026-10-13 00:55 UTC2 matching categories · 4 matching occurrences
Knowunity: AI Study & Homework
de.knowunity.appBuild 6.42.0 · 2026-10-13 00:53 UTC2 matching categories · 2 matching occurrences
Lingopanda: Language Learning
com.pingolearn.languagesBuild 3.9.1 · 2026-10-13 00:51 UTC2 matching categories · 5 matching occurrences
Jackpot Party Casino Slots
com.williamsinteractive.jackpotpartyBuild 5073.01 · 2026-10-13 00:48 UTC3 matching categories · 5 matching occurrences