Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4920 matching apps · Counts below include only this page’s mapped finding types.
DJ Mixer Studio - DJ Music Mix
music.disc.dj.mixer.music.mixerBuild 2.1.9 · 2026-10-12 22:44 UTC3 matching categories · 3 matching occurrences
PictureThis - Plant Identifier
cn.danatech.xingseusBuild 5.36.0 · 2026-10-12 22:41 UTC3 matching categories · 5 matching occurrences
Cookpad recipes, homemade food
com.mufumbo.android.recipe.searchBuild 26.41.0.2 · 2026-10-12 22:39 UTC2 matching categories · 3 matching occurrences
Butcher Hero: Monster Idle RPG
com.multicastgames.butcherBuild 2.0.4 · 2026-10-12 22:37 UTC1 matching category · 2 matching occurrences
TOSbank
no.tolga.netbank.mobileBuild 1.52.3 · 2026-10-12 22:35 UTC2 matching categories · 2 matching occurrences
New York City FC
com.nycfc.androidBuild 1.9.7 · 2026-10-12 22:32 UTC3 matching categories · 61 matching occurrences
meterUP Parking
net.sharewire.meterUPBuild 26.38.3 · 2026-10-12 22:26 UTC1 matching category · 2 matching occurrences
Redfin: Buy, Sell & Rent Homes
com.redfin.androidBuild 646.0 · 2026-10-12 22:24 UTC2 matching categories · 4 matching occurrences
Metronome: Practice & Tempo
com.merkost.metronomeBuild 1.3.0 · 2026-10-12 22:23 UTC1 matching category · 3 matching occurrences
Talking Tom: Hero Dash Run
com.outfit7.herodashBuild 26.5.1.12192 · 2026-10-12 22:20 UTC5 matching categories · 50 matching occurrences
Key Collector Comics
com.keycollectorcomics.keycollectorBuild 4.8.0 · 2026-10-12 22:16 UTC3 matching categories · 4 matching occurrences
FOX Sports: Watch Live Games
com.foxsports.androidBuild 5.159.1 · 2026-10-12 22:13 UTC3 matching categories · 5 matching occurrences
n-Track Studio DAW: Make Music
com.ntrack.studio.demoBuild 10.5.205 · 2026-10-12 22:11 UTC2 matching categories · 2 matching occurrences
Hill Climb Racing 2
com.fingersoft.hcr2Build 1.75.1 · 2026-10-12 22:09 UTC2 matching categories · 2 matching occurrences
JusTalk - Video Chat & Calls
com.juphoon.justalkBuild 8.15.1 · 2026-10-12 22:07 UTC4 matching categories · 26 matching occurrences
Seven - 7 Minute Workout
se.perigee.android.sevenBuild 9.25.18-handheld · 2026-10-12 22:02 UTC3 matching categories · 3 matching occurrences
Goibibo: Hotel, Flight & Train
com.goibiboBuild 20.7.0 · 2026-10-12 21:59 UTC4 matching categories · 17 matching occurrences
Bitcoin.com: Crypto Wallet
com.bitcoin.mwalletBuild 9.40.0 · 2026-10-12 21:57 UTC3 matching categories · 6 matching occurrences
Invoice Maker - Invoice Fly
io.labhouse.invoicesappBuild 2.44.0 · 2026-10-12 21:55 UTC1 matching category · 32 matching occurrences
AliExpress - Shopping App
com.alibaba.aliexpresshdBuild 8.177.6 · 2026-10-12 21:53 UTC2 matching categories · 2 matching occurrences
Jorte Calendar & Organizer
jp.co.johospace.jorteBuild 1.9.135 · 2026-10-12 21:51 UTC3 matching categories · 6 matching occurrences
SlideScan - Slide Scanner App
com.photomyne.slidescanBuild 2.9 · 2026-10-12 21:50 UTC3 matching categories · 3 matching occurrences
Simeji Japanese keyboard+Emoji
com.adamrocker.android.input.simejiBuild 23.6.1 · 2026-10-12 21:48 UTC3 matching categories · 4 matching occurrences
Google One
com.google.android.apps.subscriptions.redBuild 1.329.990315153 · 2026-10-12 21:45 UTC2 matching categories · 2 matching occurrences
Mind Notes: Note-Taking Apps
mindnotes.note.notepad.notebook.memo.stickynotesBuild 1.1.05.0824 · 2026-10-12 21:41 UTC2 matching categories · 8 matching occurrences