Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-0500

Issue affecting Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV clients

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMZN

Description

An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Amazon WorkSpaces Client

Default version status: unaffected

  • 5.0.0 to < 5.21.0affected

Amazon WorkSpaces Client

Default version status: unaffected

  • 2023.0 to < 2024.2affected

Amazon AppStream 2.0 Client

Default version status: unaffected

  • 1.1.1025 to < 1.1.1332affected

Amazon DCV Client

Default version status: unaffected

  • 0 to < 2023.1.6703affected

Amazon DCV Client

Default version status: unaffected

  • 2020.2.7459 to < 2023.1.9127affected

Amazon WorkSpaces Client

Default version status: unaffected

  • 5.5.0 to < 5.21.0affected

Amazon DCV Client

Default version status: unaffected

  • 2020.2.2078 to < 2023.1.6703affected

References