The vulnerability allowed users votes in the recent constitutional poll to be decrypted, Russian journalists found.