Reference detail
CWE-284 — Improper Access Control
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (12)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryExported ContentProvider without permission
Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.
Browse this categoryFirebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4933 matching apps · Counts below include only this page’s mapped finding types.
Brave Nightly
com.brave.browser_nightlyBuild 1.99.26 · 2026-10-11 20:23 UTC2 matching categories · 4 matching occurrences
Blue Water Rewards
com.excentus.bluewaterBuild 2.0.0 · 2026-10-11 20:21 UTC1 matching category · 3 matching occurrences
Getlead CRM
com.getlead.appBuild 3.2.4 · 2026-10-11 20:15 UTC1 matching category · 1 matching occurrence
Speed Test Pro - WiFi Analyzer
biz.cloudex.android.speedtestproBuild 1.0.1 · 2026-10-11 20:11 UTC1 matching category · 1 matching occurrence
iTalkBB TV - 北美首选华语视频平台
com.italkbbtv.phoneBuild 3.5.4 · 2026-10-11 20:06 UTC3 matching categories · 3 matching occurrences
Animal Rescue - Zoo Safari
com.al.animalrescueBuild 26.2.25 · 2026-10-11 20:03 UTC2 matching categories · 2 matching occurrences
Ringtonemall: Songs Editor
com.ringtonemall.songeditBuild 1.2.2 · 2026-10-11 20:00 UTC1 matching category · 3 matching occurrences
Perry Local Schools
com.schoolpointe.oh_perrylclschsBuild 200.35.1 · 2026-10-11 19:58 UTC1 matching category · 1 matching occurrence
Indie Wrestler
com.ArrenMarketing.IndieWrestlerBuild 1.5.26 · 2026-10-11 19:57 UTC2 matching categories · 2 matching occurrences
Caterpillar Events
com.crowdcompass.appu4Hjr9leqiBuild 1.91.0 (1.139.5) · 2026-10-11 19:51 UTC1 matching category · 1 matching occurrence
Compass
com.peace.CompassBuild 3.0.0 · 2026-10-11 19:50 UTC2 matching categories · 4 matching occurrences
My Talking Angela 2
com.outfit7.mytalkingangela2Build 26.5.4.44586 · 2026-10-11 19:39 UTC5 matching categories · 56 matching occurrences
Daily Horoscope Leo 2026
com.molibe.horoscope.leoBuild 1.1.1 · 2026-10-11 19:35 UTC1 matching category · 1 matching occurrence
VIETPN High speed VPN
com.vietpn.vpnBuild 3.6.18 · 2026-10-11 19:34 UTC2 matching categories · 2 matching occurrences
Wallbyte - 4K, HD Wallpapers
com.wallbyte.wallpapersBuild 5.1.0.2 · 2026-10-11 19:32 UTC1 matching category · 1 matching occurrence
Jakdojade: public transport
com.citynav.jakdojade.pl.androidBuild 7.3.4 · 2026-10-11 19:26 UTC2 matching categories · 4 matching occurrences
CookUnity Business (Fraîche)
com.fraiche.fraicheBuild 2.14.0 · 2026-10-11 19:23 UTC3 matching categories · 3 matching occurrences
JobStack for Work | Daily Pay
org.peopleready.jobstackBuild 1.80.0 · 2026-10-11 19:19 UTC1 matching category · 1 matching occurrence
Paave: AI Paper Trading
com.difisoft.paaveBuild 2.0.0 · 2026-10-11 19:15 UTC1 matching category · 2 matching occurrences
이만배 - 이걸? 만화로 배워!?
com.emanbaeBuild 1.3.0 · 2026-10-11 19:11 UTC1 matching category · 1 matching occurrence
Win7 Simu
com.visnalize.win7simuBuild 4.7.1 · 2026-10-11 19:09 UTC2 matching categories · 2 matching occurrences
ALYKA Health
com.alykahealth.phr.prod01Build 2026.10.0869 · 2026-10-11 19:08 UTC1 matching category · 3 matching occurrences
Screen Recorder & Editor: Zero
com.zero.screen.recorderBuild 1.1 · 2026-10-11 18:54 UTC1 matching category · 2 matching occurrences
Digicel Call International
com.digicel.servicesBuild 2.8.1 · 2026-10-11 18:49 UTC3 matching categories · 3 matching occurrences
Atlantic Mobile Banking
com.atlanticfcu.atlanticfcuBuild 4022.2.2 · 2026-10-11 18:37 UTC1 matching category · 3 matching occurrences