Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4905 matching apps · Counts below include only this page’s mapped finding types.
Edge - Bitcoin & Crypto Wallet
co.edgesecure.appBuild 4.51.3 · 2026-10-14 05:34 UTC5 matching categories · 15 matching occurrences
YNAB
com.youneedabudget.evergreen.appBuild 26.38.1 · 2026-10-14 05:31 UTC2 matching categories · 2 matching occurrences
Octopi Launcher • Home Screens
com.otp.octopilauncherBuild 1.922 · 2026-10-14 05:29 UTC1 matching category · 1 matching occurrence
Scanner Radio - Police Scanner
com.scannerradioBuild 8.30 · 2026-10-14 05:28 UTC3 matching categories · 5 matching occurrences
TypeApp mail - email app
com.trtf.blueBuild 2.2.262 · 2026-10-14 05:27 UTC3 matching categories · 16 matching occurrences
File Manager
com.alphainventor.filemanagerBuild 3.8.3 · 2026-10-14 05:25 UTC2 matching categories · 2 matching occurrences
Notewise - AI Notes, PDF, Docs
com.yygg.note.appBuild 4.1.5 · 2026-10-14 05:23 UTC1 matching category · 3 matching occurrences
NAVER Maps, Navigation
com.nhn.android.nmapBuild 6.11.2.2 · 2026-10-14 05:21 UTC2 matching categories · 2 matching occurrences
Camo Camera
com.reincubate.camoBuild 2.1.22.22860 · 2026-10-14 05:18 UTC1 matching category · 1 matching occurrence
Avira Security Antivirus & VPN
com.avira.androidBuild 7.33.0 · 2026-10-14 05:16 UTC3 matching categories · 4 matching occurrences
IPVanish VPN: Fast & Secure
com.ixolit.ipvanishBuild 4.1.22.0.338000-ipv-gm · 2026-10-14 05:15 UTC3 matching categories · 5 matching occurrences
WEB.DE Mail & Cloud
de.web.mobile.android.mailBuild 9.18.3 · 2026-10-14 05:13 UTC2 matching categories · 2 matching occurrences
Utility Warehouse
com.utilitywarehouse.clubhouseBuild 6.25.0 · 2026-10-14 05:11 UTC2 matching categories · 2 matching occurrences
DJ Music mixer - DJ Mix Studio
dj.music.mixer.sound.effectsBuild 2.7.0 · 2026-10-14 05:07 UTC3 matching categories · 3 matching occurrences
Ringo Ringtones Notifications
com.centralparkapps.ringo.ringtonesBuild 2.3.12 · 2026-10-14 05:05 UTC2 matching categories · 2 matching occurrences
Nine - Email & Calendar
com.ninefolders.hd3Build 4.9.7g · 2026-10-14 04:56 UTC3 matching categories · 5 matching occurrences
G-CPU:Monitor CPU, RAM, Widget
com.insideinc.gcpuBuild 3.1.1 · 2026-10-14 04:55 UTC4 matching categories · 4 matching occurrences
AI Cleaner Lite - Clean master
cleaner.clean.master.clear.phone.liteBuild 1.0.0 · 2026-10-14 04:53 UTC1 matching category · 1 matching occurrence
Scandit SDK Showcase
com.scandit.demoappBuild 8.6.2 · 2026-10-14 04:50 UTC2 matching categories · 2 matching occurrences
Honeydew: Recipe Manager
com.redhoney.eatlistBuild 1.8.0 · 2026-10-14 04:49 UTC1 matching category · 7 matching occurrences
PetSmart
com.petsmart.consumermobileBuild 15.12.3 · 2026-10-14 04:47 UTC2 matching categories · 2 matching occurrences
Govee Home
com.govee.homeBuild 7.7.02 · 2026-10-14 04:45 UTC2 matching categories · 67 matching occurrences
DB Navigator
de.hafas.android.dbBuild 26.19.0 · 2026-10-14 04:42 UTC2 matching categories · 2 matching occurrences
Job Hai - Search Job, Vacancy
com.jobhai.jobsBuild 5.0.49 · 2026-10-14 04:41 UTC2 matching categories · 4 matching occurrences
Resume Builder - CV Maker App
com.duckresume.cvmakerBuild 70.0 · 2026-10-14 04:39 UTC1 matching category · 2 matching occurrences