Reference detail

CWE-284 — Improper Access Control

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (12)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Exported ContentProvider without permission

Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4920 matching apps · Counts below include only this page’s mapped finding types.

Lezhin Comics - Daily Releases

com.lezhin.comicsBuild 2026.9.1 · 2026-10-13 00:46 UTC

2 matching categories · 5 matching occurrences

C · 73/100Static analysis complete

Prospero.Ai - AI Stock Trading

ai.prosperoBuild 2.6.10 · 2026-10-13 00:45 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

World Conqueror 4-WW2 Strategy

com.easytech.wc4.androidBuild 1.29.2 · 2026-10-13 00:42 UTC

1 matching category · 1 matching occurrence

A · 91/100Static analysis complete

Threads

com.instagram.barcelonaBuild 451.0.0.51.80 · 2026-10-13 00:40 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Frequency Healing Sounds Hertz

com.frequency.healing.chakra.binaural.beats.brainwavesBuild 1.6.8 · 2026-10-13 00:32 UTC

1 matching category · 527 matching occurrences

A · 93/100Static analysis complete

Step Tracker Launcher

com.stepcounter.pedometer.steptracker.fitness.androidBuild 1.12.1 · 2026-10-13 00:31 UTC

1 matching category · 13 matching occurrences

A · 98/100Static analysis complete

Karta Offline GPS Maps Nav

com.kartatech.karta.gpsBuild 2.53.9 · 2026-10-13 00:29 UTC

2 matching categories · 6 matching occurrences

A · 97/100Static analysis complete

Wanderlog - Trip Planner App

com.wanderlog.androidBuild 2.224 · 2026-10-13 00:27 UTC

3 matching categories · 7 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Alibaba.com - B2B marketplace

com.alibaba.intl.android.apps.poseidonBuild 26.34.0 · 2026-10-13 00:25 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Music Player & MP3 - DDMusic

musicplayer.playmusic.audioplayerBuild 2.11.1 · 2026-10-13 00:22 UTC

2 matching categories · 3 matching occurrences

B · 86/100Static analysis complete

Action Launcher: Pixel Edition

com.actionlauncher.playstoreBuild 52.0 · 2026-10-13 00:20 UTC

4 matching categories · 54 matching occurrences

B · 83/100Static analysis complete

Falcon PDF - Editor & Tools

com.avrapps.pdfviewerBuild 2026.09 · 2026-10-13 00:19 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

Yahoo News: Daily News For You

com.yahoo.mobile.client.android.yahooBuild 97.0.0 · 2026-10-13 00:18 UTC

3 matching categories · 5 matching occurrences

A · 96/100Static analysis complete

Google Cloud

com.google.android.apps.cloudconsoleBuild 26.09.241400 · 2026-10-13 00:16 UTC

3 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Todoery: To Do List & Planner

todolist.scheduleplanner.dailyplanner.todo.remindersBuild 1.03.39.0929 · 2026-10-13 00:14 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

Today Weather:Data by NOAA/NWS

mobi.lockdown.weatherBuild 2.5.2-2 · 2026-10-13 00:13 UTC

3 matching categories · 6 matching occurrences

F · 22/100Static analysis complete

SNOW - AI Profile

com.campmobile.snowBuild 15.4.6 · 2026-10-13 00:08 UTC

3 matching categories · 3 matching occurrences

C · 72/100Static analysis complete

Bitdefender SecurePass

com.bitdefender.securepassBuild 2.5.1 · 2026-10-13 00:05 UTC

1 matching category · 3 matching occurrences

A · 97/100Static analysis complete

PoS Cash Register

ml.mixxamm.poscashregisterBuild 2.1.11 · 2026-10-13 00:03 UTC

1 matching category · 6 matching occurrences

A · 98/100Static analysis complete

HelloDIAL - Call CRM

io.helloleads.dialerBuild 1.7.5 · 2026-10-13 00:02 UTC

2 matching categories · 2 matching occurrences

C · 73/100Static analysis complete

Notebloc Scanner - Scan to PDF

com.notebloc.appBuild 5.9.1 · 2026-10-13 00:00 UTC

4 matching categories · 50 matching occurrences

B · 82/100Static analysis complete

Memasik - Meme Maker

com.nick.memasikBuild 8.1.0 · 2026-10-12 23:53 UTC

2 matching categories · 7 matching occurrences

A · 91/100Static analysis complete

Voice Recorder - XVoice

recorderpro.voicememos.audioBuild 6.6 · 2026-10-12 23:50 UTC

1 matching category · 1 matching occurrence

A · 97/100Static analysis complete

SMS Drive - Backup & Restore

devesh.ephrine.backup.smsBuild 3.0.8 · 2026-10-12 23:47 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

MyVTech Baby Pro

com.cams.vtech.mvb.proBuild 1.2.3 · 2026-10-12 23:41 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete