OpenSIAC Incorrect Authentication Vulnerability Allowing Impersonation via Cl@ve

A vulnerability allowing incorrect authentication has been identified in OpenSIAC version 1.0, part of the GTT group digital government platform. This issue could enable an attacker to impersonate a user authenticated through Cl@ve. The vulnerability does not affect users relying on other identification methods, such as VALIDe or digital certificates.

Impact

Exploitation of this vulnerability could lead to unauthorized impersonation of users, potentially allowing attackers to access services or perform actions on behalf of the impersonated individuals.

Remediation

The vulnerability has been fixed in OpenSIAC version 1.2.