Yandex.Metro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Metro published at the 'play' market has multiple vulnerabilities...