CVE-2025-40807: Medium severity Gridscale Gridscale X Prepay vulnerability
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Gridscale X Prepayto a version that resolves this vulnerability.Fixed in V4.2.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40807?
CVE-2025-40807 is considered a high severity vulnerability due to its potential for session hijacking.
How do I fix CVE-2025-40807?
To fix CVE-2025-40807, upgrade Gridscale X Prepay to version 4.2.1 or later.
What are the risks associated with CVE-2025-40807?
The risks include the potential for unauthorized access as locked-out users may regain access through token replay.
Who is affected by CVE-2025-40807?
All users of Gridscale X Prepay versions prior to 4.2.1 are affected by CVE-2025-40807.
What types of attacks can CVE-2025-40807 enable?
CVE-2025-40807 can enable capture-replay attacks, allowing attackers to reuse authentication tokens.