Description
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Amazon WorkSpaces Client
Default version status: unaffected
3.0.0 to < 5.22.1affected
Amazon WorkSpaces Client
Default version status: unaffected
3.0.0 to < 2024.6affected
Amazon WorkSpaces Client
Default version status: unaffected
3.0.1 to < 5.0.1affected
References
- https://aws.amazon.com/security/security-bulletins/AWS-2025-001/ ↗
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes ↗
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.html#osx-release-notes ↗
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes ↗
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-android-client.html#android-release-notes ↗