<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"\@Malgun Gothic";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.MsoSmartlink
{mso-style-priority:99;
color:blue;
background:#F3F2F1;
text-decoration:underline;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-CA" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" style="margin-bottom:12.0pt">Hello Sylvain and Ivan,<o:p></o:p></p>
<p class="MsoNormal">The Government of Quebec's Centre Gouvernemental de Cyberdéfense discovered the vulnerability or vulnerabilities listed in the table below.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">By law, McGill University is required to:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">take action to address any vulnerabilities they find; <o:p></o:p></p>
<p class="MsoNormal">promptly reply back to them with a plan for resolving the issue(s).<o:p></o:p></p>
<p class="MsoNormal">As we have a limited timeframe to address the situation, could you please reply back to this email no later than Sep 27<sup>th</sup> to confirm that you've either resolved the vulnerability, or provide us with your proposed plan and timeframe
to do so? Due to our legal obligations, if the vulnerability has not been resolved after Nov. 25<sup>th</sup> we will have to temporarily block external access to the service, system, or site (e.g. it will not be accessible to anyone from outside the McGill
network).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Vulnerability Details:<o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal">Name: ipmsa-loris.bic.mni.mcgill.ca<o:p></o:p></p>
<p class="MsoNormal">Address: 132.216.133.49<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Vulnerability webpages :<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
<p class="MsoNormal">Affected Items :<span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black">
</span><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/">https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/</a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<thead>
<tr>
<td width="100" style="width:75.0pt;border:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>ID PSV </b><b><span style="font-family:"Calibri",sans-serif"><o:p></o:p></span></b></p>
</td>
<td width="429" style="width:321.4pt;border:solid darkgray 1.0pt;border-left:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>Actif <o:p></o:p></b></p>
</td>
<td width="94" style="width:70.15pt;border:solid darkgray 1.0pt;border-left:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b>Criticité <o:p></o:p></b></p>
</td>
<td width="142" style="width:106.35pt;border:solid darkgray 1.0pt;border-left:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA">Date de création de la PSV
<o:p></o:p></span></b></p>
</td>
<td width="258" style="width:193.3pt;border:solid darkgray 1.0pt;border-left:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA" style="background:yellow;mso-highlight:yellow">Quel est l'impact du préjudice maximal?
</span><span style="background:yellow;mso-highlight:yellow">(Ex</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow;mso-highlight:yellow"> </span><span style="background:yellow;mso-highlight:yellow">:</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow;mso-highlight:yellow"> </span><span style="background:yellow;mso-highlight:yellow">«</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow;mso-highlight:yellow"> </span><span style="background:yellow;mso-highlight:yellow">Réputation:Élevé</span></b><b><span style="font-family:"Arial",sans-serif;background:yellow;mso-highlight:yellow"> </span><span style="background:yellow;mso-highlight:yellow">»)
<o:p></o:p></span></b></p>
</td>
<td style="border-top:solid darkgray 1.0pt;border-left:none;border-bottom:none;border-right:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span lang="FR-CA" style="background:yellow;mso-highlight:yellow">Est-ce qu'un correctif est disponible?
</span><span style="background:yellow;mso-highlight:yellow">(oui/non) <o:p></o:p></span></b></p>
</td>
</tr>
</thead>
<tbody>
<tr>
<td style="border:solid darkgray 1.0pt;border-top:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center">PSV-4804<o:p></o:p></p>
</td>
<td width="429" style="width:321.4pt;border-top:none;border-left:none;border-bottom:solid darkgray 1.0pt;border-right:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/">https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/</a><o:p></o:p></p>
</td>
<td width="94" style="width:70.15pt;border-top:none;border-left:none;border-bottom:solid darkgray 1.0pt;border-right:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center">2- Moyenne<span style="color:black"><o:p></o:p></span></p>
</td>
<td width="142" style="width:106.35pt;border-top:none;border-left:none;border-bottom:solid darkgray 1.0pt;border-right:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" align="center" style="text-align:center">2024-09-25<o:p></o:p></p>
</td>
<td width="258" style="width:193.3pt;border-top:none;border-left:none;border-bottom:solid darkgray 1.0pt;border-right:solid darkgray 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal">Moyenne<o:p></o:p></p>
</td>
<td style="border:solid darkgray 1.0pt;border-left:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Times New Roman",serif">OUI<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN">1) Criticality : CVSS 6.5<o:p></o:p></span></p>
<p class="MsoNormal">2) Description : <span lang="EN">Cross-Site Scripting (XSS) attacks occur when data is included in dynamic content that is sent to a web user without checking for malicious content. The variety
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN"> of XSS-based attacks is almost limitless, but they typically involve transmitting private data to the attacker or performing other malicious operations on the <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN"> user's machine under the guise of the vulnerable site. The "from", "firstname", and "lastname" parameters have been found to be vulnerable to XSS HTML
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN"> injection attacks. These parameters are used on the IPMSA account sign-up page.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN">3) Probability : After intercepting the request, the attacker can test the parameters to inject malicious code. This vulnerability is often exploited by attackers.<o:p></o:p></span></p>
<p class="MsoNormal">4) Impact : The attacker can inject malicious code or cause a redirect to a dangerous site. They can also exfiltrate information entered by the victim.<o:p></o:p></p>
<p class="MsoNormal">5) Proposed solution : Data from the form must be validated and sanitized on the server side before it is used or stored. The "from", "firstname" and "lastname" fields were used
<o:p></o:p></p>
<p class="MsoNormal"> for injection, but it is important to validate and sanitize all fields in the form
<o:p></o:p></p>
<p class="MsoNormal">6) Reference : <a href="https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS).html">
OWASP Top Ten 2017 | A7:2017-Cross-Site Scripting (XSS) | OWASP Foundation</a><o:p></o:p></p>
<p class="MsoNormal"> <a href="https://www.cgisecurity.com/xss-faq.html">
https://www.cgisecurity.com/xss-faq.html</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">7) Details and proofs of concept : <o:p></o:p></p>
<p class="MsoNormal"> To demonstrate the execution of the JavaScript code, here are 3 links displaying an alert with the value 1:<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last&from=testest.com%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&site=2&project">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last&from=testest.com"><script>alert`1`</script>&site=2&project</a><o:p></o:p></span></p>
<p class="MsoNormal"><img border="0" width="423" height="93" style="width:4.4097in;height:.9722in" id="_x0000_i1030" src="cid:image001.png@01DB0FFD.F9755380"><span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&lastname=last&from=testest.com&site=2&project">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first"><script>alert`1`</script>&lastname=last&from=testest.com&site=2&project</a><o:p></o:p></span></p>
<p class="MsoNormal"><img border="0" width="416" height="119" style="width:4.3333in;height:1.2361in" id="_x0000_i1029" src="cid:image004.png@01DB0FFE.E550CFF0"><span style="font-size:11.0pt"><br>
<a href="https://ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last%22%3E%3Cscript%3Ealert%601%60%3C/script%3E&from=testest.com&site=2&project">ipmsa-loris.bic.mni.mcgill.ca/login/request-account/?firstname=first&lastname=last"><script>alert`1`</script>&from=testest.com&site=2&project</a><o:p></o:p></span></p>
<p class="MsoNormal"><img border="0" width="413" height="107" style="width:4.3055in;height:1.1111in" id="Picture_x0020_1" src="cid:image005.png@01DB0FFE.E550CFF0"><span style="font-size:11.0pt"><br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal">Next steps:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Get help if needed: If you're not sure what to do, don't hesitate to reach out to your IT team or service provider. They can guide you through the steps to fix these issues.<o:p></o:p></p>
<p class="MsoNormal">In the future: It's crucial to proactively scan and address vulnerabilities promptly to keep your system secure.<o:p></o:p></p>
<p class="MsoNormal">Stay in touch: Once you've taken steps to fix things, let us know. We'll do our best to help if you need further assistance or have any questions.<o:p></o:p></p>
<p class="MsoNormal">Hope to hear from you soon,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Kindly find the attached file.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best Regards,<o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US">Jaetaek Kim </span></b><b><span lang="EN-US" style="font-size:10.0pt;color:#A6A6A6">CISSP</span></b><b><span lang="EN-US"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-US">IT Information Security Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Infrastructure and Information Security (IIS)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">T: 514-396-1036<o:p></o:p></span></p>
<p class="MsoNormal"><a href="mailto:Jaetaek.kim@mcgill.ca"><span lang="EN-US" style="color:#0563C1">Jaetaek.kim@mcgill.ca</span></a><span lang="EN-US"> |
</span><a href="http://www.mcgill.ca/it"><span lang="EN-US" style="color:#0563C1">www.mcgill.ca/it</span></a>
<span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">805 Sherbrooke O. #200, Montréal, QC, H3A 0B9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><img border="0" width="395" height="97" style="width:4.118in;height:1.0138in" id="Picture_x0020_3" src="cid:image002.jpg@01DB0FFC.7E789AD0" alt="IT Services logo w McGill Crest_tagline eng"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-US">Get<b> CyberSafe </b>and<b> Secure Your Journey.
</b></span></i><span lang="FR-CA">| </span><a href="http://www.mcgill.ca/cybersafe"><span lang="FR-CA" style="color:#0563C1">www.mcgill.ca/cybersafe</span></a><span lang="FR-CA"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> COCD <</span><a href="mailto:cocd@education.gouv.qc.ca"><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">cocd@education.gouv.qc.ca</span></a><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">>
<br>
<b>Sent:</b> September 24, 2024 1:44 PM<br>
<b>To:</b> Sylvain Hamel <</span><a href="mailto:sylvain.hamel@mcgill.ca"><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">sylvain.hamel@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">>;
Dennis Hayson Wong <</span><a href="mailto:hayson.wong@mcgill.ca"><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">hayson.wong@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">>; Jacek
Slaboszewicz <</span><a href="mailto:jacek.slaboszewicz@mcgill.ca"><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">jacek.slaboszewicz@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Cc:</b> Alex Aragona <</span><a href="mailto:alex.aragona@mcgill.ca"><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">alex.aragona@mcgill.ca</span></a><span lang="FR-CA" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:</b> PSV-4804_Université McGill-979000_ Signalement de vulnérabilité par le CGCD _ 2024-09-25<br>
<b>Importance:</b> Low<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="FR-CA"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="FR-CA">Bonjour, <br>
<br>
Nous tenons à vous informer que nous avons reçu un signalement du CGCD d'une vulnérabilité touchant l'un de vos actifs.
<br>
<br>
Nous avons déposé le rapport du signalement <b>(PSV-4804)</b> sur le Teams: <br>
</span><a href="https://eduqc.sharepoint.com/sites/TM-SI-3-Reseaux-GTIR-Partage-Universits/Documents%20partages/Partage%20-%20Universit%C3%A9s/979000%20-%20Universit%C3%A9%20McGill/Signalement%20Vuln%C3%A9rabilit%C3%A9%20CGCD" target="_blank"><span class="MsoSmartlink"><span lang="FR-CA">TM-SI-3-Réseaux-GTIR
> Partage - Universités > 979000 - Université McGill > Signalement Vulnérabilité CGCD.
</span></span></a><span lang="FR-CA"><br>
<br>
Selon </span><a href="https://eduqc.sharepoint.com/sites/TM-SI-3-Reseaux-GTIR/Documents%20partages/General/Processus%20GMVI%202022-V4.2-2022-06-22.pdf" target="_blank"><span class="MsoSmartlink"><span lang="FR-CA">le processus GMVI
</span></span></a><span lang="FR-CA">, vous avez l’obligation de prendre en charge cette vulnérabilité et nous fournir les réponses aux questions ci-dessous au plus tard le:
<b>27-09-2024</b> <o:p></o:p></span></p>
<p><span lang="FR-CA">Sachant que la probabilité de concrétisation (Priorité) est:<b> Moyenne
</b><o:p></o:p></span></p>
<p><span lang="FR-CA">En utilisant le tableau 1: <br>
1. Quel est le type de préjudice ayant l'impact le plus élevé ? (Exemple : Préjudice causé à la réputation)
<br>
2. Quelle est votre évaluation du niveau d'impact du préjudice sélectionné? (Exemple : Élevé)<o:p></o:p></span></p>
<p><span lang="FR-CA">3. Est-ce qu'un correctif est disponible, sans développement interne?<o:p></o:p></span></p>
<p><span lang="FR-CA">Selon les tableaux 8 à 10 et votre réponse à la question 3 :
<br>
4. Quel est le délai de correction prescrit selon le processus GMVI? (2/8/15/30/45/60/90 jours)
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA"><br>
Si vous avez des questions, n’hésitez pas à nous contacter. <br>
</span><span lang="FR-CA"><br>
<br>
Ce courriel est confidentiel et destiné exclusivement à l'organisation propriétaire de l'actif cible. Si vous n'êtes pas le destinataire prévu et que vous avez reçu ce courriel par erreur, veuillez le supprimer immédiatement et nous en aviser.
<br>
<br>
Responsable du traitement: Sofien Khayat <br>
</span><a href="mailto:sofien.khayat.ext@education.gouv.qc.ca"><span lang="FR-CA">sofien.khayat.ext@education.gouv.qc.ca</span></a>
<span lang="FR-CA"><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:#E6E6E6;border-collapse:collapse">
<tbody>
<tr style="height:48.75pt">
<td width="160" style="width:120.0pt;padding:.75pt 30.0pt .75pt 30.0pt;height:48.75pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="color:#6E6E6E"><img border="0" width="140" height="50" style="width:1.4583in;height:.5208in" id="Picture_x0020_2" src="cid:image003.png@01DB0FFC.7E789AD0"></span><span style="color:#6E6E6E"><o:p></o:p></span></p>
</td>
<td width="40%" style="width:40.0%;padding:.75pt 15.0pt .75pt 15.0pt;height:48.75pt">
<p align="center" style="text-align:center"><span lang="FR-CA" style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#6E6E6E">Centre Opérationnel de Cyberdéfense
<br>
Ministère de l’Éducation et Ministère de l’Enseignement supérieur<o:p></o:p></span></p>
</td>
<td width="40%" style="width:40.0%;padding:.75pt 15.0pt .75pt 15.0pt;height:48.75pt">
<p align="center" style="text-align:center"><span lang="FR-CA" style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#6E6E6E">Courriel :
</span><span style="font-size:10.0pt;font-family:"Times New Roman",serif;color:black"><a href="mailto:cocd@education.gouv.qc.ca"><span lang="FR-CA">cocd@education.gouv.qc.ca</span></a></span><span lang="FR-CA" style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#6E6E6E"><br>
Tél.: (418) 644-0602 poste : 4000<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><img border="0" width="1" height="1" style="width:.0069in;height:.0069in" id="_x0000_i1025" src="https://u20063366.ct.sendgrid.net/wf/open?upn=u001.7eFyKHmFPn7AOoxT9FXJFRBj4MrkZ84ZtCQf3IPiq4I201WgnNCe20N-2ByKZXyntLrUzJzjKRXPVbhHlcLPBWFwiXzGNzIgtbhQjAbcSXvXSm-2F-2B76xQicGWfaE67l8SBc7r948-2F88UyiL8-2F2kOpFIZA2OnLswETHUwqypp3nbpc57DNo3cinfj8b-2Fh29e6mOZWGVzh9yx00M-2FB4sezC9WsQ-3D-3D"><o:p></o:p></p>
</div>
</body>
</html>