Reference detail

CWE-284 — Improper Access Control

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (12)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Exported ContentProvider without permission

Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4930 matching apps · Counts below include only this page’s mapped finding types.

izneo: Read Manga and Comics

fr.airweb.izneoBuild 9.9.5 · 2026-10-12 08:26 UTC

3 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

eFax® App: Plus-Pro-Protect

com.j2.efaxBuild 6.2.14 · 2026-10-12 08:23 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Situation Boyfriend -Voice App

jp.sugarapps.situationkareshiBuild 31.0.21 · 2026-10-12 08:21 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Cashman Casino Slots Games

com.productmadness.cashmancasinoBuild 5.19.248 · 2026-10-12 08:16 UTC

4 matching categories · 4 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Animated Sticker Maker (FSM)

alpha.sticker.makerBuild 1.53-minApi24 · 2026-10-12 08:13 UTC

2 matching categories · 4 matching occurrences

A · 96/100Static analysis complete

LUDUS・PvP Merge Battle Game

com.studion.mergearenaBuild 1.37.4 · 2026-10-12 08:11 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Lingokids: Games & Shows

es.monkimun.lingokidsBuild 26.40.0 · 2026-10-12 08:08 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

BeReal. Your friends for real.

com.bereal.ftBuild 3.97.1 · 2026-10-12 08:03 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

Habit Tracker

com.oristats.habitbullBuild 1.5.42 · 2026-10-12 08:00 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

WeWard - Walk & Earn Rewards

com.wewardBuild 9.2.1 · 2026-10-12 07:59 UTC

3 matching categories · 7 matching occurrences

B · 87/100Static analysis complete

Home Workout App: Fitness

homeworkoutapp.homeworkout.fitness.workout.loseweightBuild 1.4.4 · 2026-10-12 07:54 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

KFC US: Ordering & Delivery

com.kfc.us.mobileBuild 2026.9.0 · 2026-10-12 07:50 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Mi Banco Mobile

com.popular.android.mibancoBuild 3.73.1 · 2026-10-12 07:48 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Flashfood—Grocery deals

com.flashfoodapp.androidBuild 3.12.0 · 2026-10-12 07:44 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Dollar General-Digital Coupons

com.dollargeneral.androidBuild 16.1.226 · 2026-10-12 07:42 UTC

3 matching categories · 3 matching occurrences

D · 35/100Static analysis complete

BlueWallet Bitcoin Wallet

io.bluewallet.bluewalletBuild 8.0.2 · 2026-10-12 07:40 UTC

2 matching categories · 2 matching occurrences

D · 36/100Static analysis complete

Chime® – Fee-Free Banking

com.onedebit.chimeBuild 5.347.1 · 2026-10-12 07:39 UTC

2 matching categories · 2 matching occurrences

A · 94/100Static analysis complete

AutoZonePro Mobile

com.autozonepro.appBuild 5.4.0 · 2026-10-12 07:36 UTC

1 matching category · 1 matching occurrence

A · 99/100Static analysis complete

CFB Connect

com.mfoundry.mb.android.mb_beb101463Build 6.0.0.13725 · 2026-10-12 07:35 UTC

1 matching category · 2 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Minimalist Launcher - Flow

com.app.flowlauncherBuild 40.1.6 · 2026-10-12 07:33 UTC

1 matching category · 3 matching occurrences

D · 43/100Static analysis complete

Foxit PDF Editor

com.foxit.mobile.pdf.liteBuild 2026.5.0.0828.1035 · 2026-10-12 07:31 UTC

1 matching category · 2 matching occurrences

B · 85/100Static analysis complete

Central Assembly - Great Falls

com.subsplashconsulting.s_HXZTC2Build 6.23.4 · 2026-10-12 07:29 UTC

3 matching categories · 3 matching occurrences

A · 94/100Static analysis complete

Smiling-X 2 : Horror Adventure

com.IndieFist.SmilingXResistanceSurvivalHorrorBuild 2.0.3 · 2026-10-12 07:27 UTC

1 matching category · 3 matching occurrences

A · 99/100Static analysis complete

CalendPal: Calendar Planner

calendar.agenda.calendarplanner.agendaplannerBuild 2.07.35.0930 · 2026-10-12 07:21 UTC

2 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Challenges - Compete, Get Fit

com.fitnow.challengesBuild 26.08.05 · 2026-10-12 07:18 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete