Description (CNA)
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Amazon / WorkSpaces Client | affected 3.0.0 before 5.22.1 |
| Amazon / WorkSpaces Client | affected 3.0.0 before 2024.6 |
| Amazon / WorkSpaces Client | affected 3.0.1 before 5.0.1 |
CWE
CWE-295
References
- https://aws.amazon.com/security/security-bulletins/AWS-2025-001/
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.html#osx-release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-android-client.html#android-release-notes
ADP enrichment
No English description supplied.
No references supplied.