Cert-In's risk assessment identifies the possibility of unauthorised access to sensitive information, user impersonation and unauthorised modification of application data