Reference detail

CWE-284 — Improper Access Control

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (12)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Exported ContentProvider without permission

Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4920 matching apps · Counts below include only this page’s mapped finding types.

Resideo - Smart Home

com.honeywell.android.lyricBuild 6.21.1 · 2026-10-12 23:39 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

Homes.com Real Estate & Rent

com.homes.homesdotcomBuild 18.7.0 · 2026-10-12 23:37 UTC

1 matching category · 2 matching occurrences

A · 97/100Static analysis complete

HelloTalk - Learn Languages

com.hellotalkBuild 6.4.20 · 2026-10-12 23:36 UTC

4 matching categories · 5 matching occurrences

B · 83/100Static analysis complete

Disney+

com.disney.disneyplusBuild 26.18.0+rc5-2026.10.05 · 2026-10-12 23:33 UTC

2 matching categories · 3 matching occurrences

A · 92/100Static analysis complete

WeComics TH: Webtoon

com.ookbee.ookbeecomics.androidBuild 3.0.4.50 · 2026-10-12 23:30 UTC

3 matching categories · 3 matching occurrences

B · 78/100Static analysis complete

Bike Race:Motorcycle Games

com.topfreegames.bikeracefreeworldBuild 8.26.0 · 2026-10-12 23:29 UTC

4 matching categories · 9 matching occurrences

B · 77/100Static analysis complete

Fruit Ninja®

com.halfbrick.fruitninjafreeBuild 3.97.9 · 2026-10-12 23:24 UTC

3 matching categories · 6 matching occurrences

A · 95/100Static analysis complete

Calorie Counter - MyNetDiary

com.fourtechnologies.mynetdiary.adBuild 9.8.9 · 2026-10-12 23:22 UTC

2 matching categories · 2 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Text Free: Second Phone Number

com.pinger.textfreeBuild 13.28 · 2026-10-12 23:20 UTC

3 matching categories · 3 matching occurrences

A · 91/100Static analysis complete

Sleep Sounds - relaxing sounds

relax.sleep.relaxation.sleepingsoundsBuild 2.11.2 · 2026-10-12 23:17 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Park Master

com.kayac.park_masterBuild 3.2.7 · 2026-10-12 23:15 UTC

3 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

Photo Gallery - Album, Vault

photo.manager.private.photogalleryBuild 5.7.3 · 2026-10-12 23:14 UTC

2 matching categories · 3 matching occurrences

A · 98/100Static analysis complete

adidas: Shop Shoes & Clothing

com.adidas.appBuild 6.16.0 · 2026-10-12 23:12 UTC

3 matching categories · 5 matching occurrences

B · 89/100Static analysis complete

File Manager

files.fileexplorer.filemanagerBuild 1.5.5.9 · 2026-10-12 23:09 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Ult: Trade Stocks & Crypto

com.defi.walletBuild 3.0.2 · 2026-10-12 23:08 UTC

2 matching categories · 4 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Cashew—Expense Budget Tracker

com.budget.tracker_appBuild 6.6.11 · 2026-10-12 23:03 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

Kids Color Games: Baby Drawing

com.bimiboo.drawingBuild 3.138 · 2026-10-12 23:00 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Words Meaning - US Dictionary

dev.xaenox.dictionaryBuild 1.4.1 · 2026-10-12 22:58 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

MSN

com.microsoft.amp.apps.bingnewsBuild 34.1.440907006 · 2026-10-12 22:57 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

Psiphon VPN: Secure Access

com.psiphon3.subscriptionBuild 2.5.11 · 2026-10-12 22:55 UTC

1 matching category · 1 matching occurrence

A · 99/100Static analysis complete

YouCut - Video Editor & Maker

com.camerasideas.trimmerBuild 1.722.1225 · 2026-10-12 22:52 UTC

3 matching categories · 3 matching occurrences

A · 95/100Static analysis complete

FaceApp: Perfect Face Editor

io.faceappBuild 14.0.0 · 2026-10-12 22:51 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

WarehouseNow -Rent a Warehouse

com.warehousenow.customerBuild 3.0.1 · 2026-10-12 22:48 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Today's Hit Music Ringtones

net.andromo.dev58853.app253629Build 6.5.73 · 2026-10-12 22:46 UTC

2 matching categories · 4 matching occurrences

D · 36/100Static analysis complete

Web Video Cast | Browser to TV

com.instantbits.cast.webvideoBuild 6.0.3 · 2026-10-12 22:45 UTC

2 matching categories · 8 matching occurrences

B · 85/100Static analysis complete