Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4905 matching apps · Counts below include only this page’s mapped finding types.
GrabMerchant
com.grab.merchantBuild 4.196.0 · 2026-10-14 06:30 UTC2 matching categories · 4 matching occurrences
CRM Video
com.connectcdk.videoBuild 260.08.03 · 2026-10-14 06:27 UTC1 matching category · 2 matching occurrences
Settle Up – Group Expenses
cz.destil.settleupBuild 11.0.2283 · 2026-10-14 06:25 UTC2 matching categories · 2 matching occurrences
STL & 3D Model Viewer - Mes3D
com.onnex.mes3dBuild 1.0.15 · 2026-10-14 06:24 UTC1 matching category · 2 matching occurrences
Screen Recorder with Facecam
com.facecam.screenrecorderBuild 1.0.2 · 2026-10-14 06:23 UTC1 matching category · 1 matching occurrence
Violin Tuner - LikeTones
com.sonkins.tviolinBuild 26.2.8 · 2026-10-14 06:21 UTC1 matching category · 3 matching occurrences
t-online - Nachrichten
de.telekom.t_online_deBuild 16.3.1 · 2026-10-14 06:19 UTC2 matching categories · 2 matching occurrences
Roku Remote (Official)
com.roku.remoteBuild 14.1.2.10730047 · 2026-10-14 06:17 UTC2 matching categories · 4 matching occurrences
WiFiSet - Wifi Network Scanner
com.wifiset.wifisetBuild 7.8.0 · 2026-10-14 06:15 UTC1 matching category · 2 matching occurrences
Cleaner - Clean Phone & VPN
com.stolitomsonBuild 2.6.27.1 · 2026-10-14 06:14 UTC2 matching categories · 2 matching occurrences
Cooking World!
com.cooking.world.chef.craze.restaurant.fever.freeBuild 1.56.3.1242 · 2026-10-14 06:08 UTC4 matching categories · 8 matching occurrences
My Talking Hank: Islands
com.outfit7.mytalkinghankBuild 26.5.0.48585 · 2026-10-14 06:05 UTC5 matching categories · 56 matching occurrences
Cittamobi: Ônibus e Trilhos
br.com.cittabusBuild 7.2.162 · 2026-10-14 06:02 UTC2 matching categories · 2 matching occurrences
KW Real Estate
com.smarteragent.android.kwBuild 9.36.0 · 2026-10-14 06:01 UTC3 matching categories · 9 matching occurrences
Bix Learn: Language Learning
com.divineworld.bixlearnBuild 1.5.0+37 · 2026-10-14 05:57 UTC2 matching categories · 38 matching occurrences
Email: Fast, Manage All Mails
email.home.allmail.launcherBuild 1.5.3 · 2026-10-14 05:55 UTC1 matching category · 1 matching occurrence
One4Wall: 4K Wallpapers & Live
one4studio.wallpaper.one4wallBuild 5.2.10 · 2026-10-14 05:53 UTC1 matching category · 2 matching occurrences
Spectrum TV
com.TWCableTVBuild 10.13.0.300599705.release · 2026-10-14 05:52 UTC2 matching categories · 2 matching occurrences
Fire Emblem Heroes
com.nintendo.zabaBuild 10.10.0 · 2026-10-14 05:50 UTC2 matching categories · 2 matching occurrences
Sleep Tracker & Recorder: Yawn
sleeptrakcer.sleeprecorder.sleepapp.sleepBuild 1.26.0 · 2026-10-14 05:47 UTC1 matching category · 1 matching occurrence
Pikmin Bloom: Walk & Explore
com.nianticlabs.pikminBuild 155.0 · 2026-10-14 05:45 UTC2 matching categories · 2 matching occurrences
Sports Tracker: Run Bike Hike
com.stt.androidBuild 6.13.8 · 2026-10-14 05:43 UTC3 matching categories · 5 matching occurrences
Skiplagged - Exclusive Flights
com.skiplaggedBuild 3.14.0 · 2026-10-14 05:39 UTC2 matching categories · 2 matching occurrences
Chick-fil-A®
com.chickfila.cfaflagshipBuild 2026.20.0 · 2026-10-14 05:38 UTC1 matching category · 1 matching occurrence
Best Buy: Shop tech deals
com.bestbuy.androidBuild 26.9.20 · 2026-10-14 05:36 UTC1 matching category · 1 matching occurrence