Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.
CWE-732, CWE-280