Reference detail

CWE-284 — Improper Access Control

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (12)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Exported ContentProvider without permission

Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4905 matching apps · Counts below include only this page’s mapped finding types.

PlantCare+: AI Plant Assistant

com.pakdata.plant_aiBuild 1.1.0 · 2026-10-14 03:34 UTC

2 matching categories · 3 matching occurrences

D · 43/100Static analysis complete

AlfredCamera Home Security app

com.ivuuBuild 2026.21.0 · 2026-10-14 03:33 UTC

2 matching categories · 2 matching occurrences

B · 89/100Static analysis complete

Traffic 3D Parking: Escape Jam

traffic.parking.jam.escape.car3d.gamesBuild 1.6.0 · 2026-10-14 03:31 UTC

3 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Instacart Shopper: Earn money

com.instacart.shopperBuild 4.501.5-p · 2026-10-14 03:29 UTC

2 matching categories · 2 matching occurrences

B · 89/100Static analysis complete

Flashcard Maker Vocab Notebook

ru.mobsolutions.memowordBuild 8.5.2 · 2026-10-14 03:27 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Aster Mail: Encrypted Email

org.astermail.androidBuild 1.0.11 · 2026-10-14 03:25 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Airlearn - Language Learning

com.unacademy.antonioBuild 3.13.23.2 · 2026-10-14 03:24 UTC

1 matching category · 4 matching occurrences

A · 98/100Static analysis complete

WebComics - Webtoon & Manga

com.webcomics.mangaBuild 3.9.50 · 2026-10-14 03:22 UTC

3 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

DoubleU Casino™ - Vegas Slots

com.doubleugames.DoubleUCasinoBuild 8.60.0 · 2026-10-14 03:21 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Empires & Puzzles: Match-3 RPG

com.smallgiantgames.empiresBuild 89.1.0 · 2026-10-14 03:18 UTC

3 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Period Tracker

com.period.tracker.liteBuild 12.10.7 · 2026-10-14 03:14 UTC

4 matching categories · 6 matching occurrences

B · 84/100Static analysis complete

Third Eye Opening Pineal Gland

com.third.eye.brainwaves.chakra.meditationBuild 1.5.8 · 2026-10-14 03:12 UTC

1 matching category · 596 matching occurrences

A · 93/100Static analysis complete

MyScript Math: Solve & Plot

com.myscript.mathBuild 1.11.0 · 2026-10-14 03:11 UTC

2 matching categories · 2 matching occurrences

A · 92/100Static analysis complete

Speed Stars: Running Game

com.lukedoukakis.speedstarsBuild 2.54 · 2026-10-14 03:09 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

ixigo: Flight & Hotel Booking

com.ixigoBuild 7.0.18 · 2026-10-14 03:07 UTC

3 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Uber: Rides, eats, hotels

com.ubercabBuild 4.652.10004 · 2026-10-14 03:05 UTC

4 matching categories · 9 matching occurrences

B · 84/100Static analysis complete

Chowdeck | Food Delivery

com.chowdeck.comBuild 3.4.4 · 2026-10-14 03:03 UTC

2 matching categories · 2 matching occurrences

A · 95/100Static analysis complete

Kraken Pro: Advanced Trading

com.kraken.tradeBuild 6.1.1 · 2026-10-14 03:00 UTC

1 matching category · 1 matching occurrence

Limited coverageRecorded findings available · overall grade withheld

GO2bank: Mobile banking

com.greendotcorp.go2bankBuild 3.2.2 · 2026-10-14 02:58 UTC

3 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

HEY Email

com.basecamp.heyBuild 1.32.2 · 2026-10-14 02:56 UTC

3 matching categories · 6 matching occurrences

A · 96/100Static analysis complete

Wallpaper Studio

net.smartlauncher.wallpaperstudioBuild 1.0 build 008 · 2026-10-14 02:54 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Manglish Keyboard

com.clusterdev.malayalamkeyboardBuild 17.6.5 · 2026-10-14 02:53 UTC

3 matching categories · 6 matching occurrences

A · 95/100Static analysis complete

Total Commander - file manager

com.ghisler.android.TotalCommanderBuild 3.62 · 2026-10-14 02:52 UTC

1 matching category · 1 matching occurrence

B · 82/100Static analysis complete

Work Shift Calendar

com.lrhsoft.shiftercalendarBuild 2.0.7.8 · 2026-10-14 02:51 UTC

2 matching categories · 2 matching occurrences

B · 84/100Static analysis complete

My Diary - Daily Diary Journal

mydiary.journal.diary.diarywithlock.diaryjournal.secretdiaryBuild 1.04.17.0918 · 2026-10-14 02:49 UTC

3 matching categories · 4 matching occurrences

A · 95/100Static analysis complete