High severity7.5NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026

CVE-2025-0500

Description

An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Amazon/Amazon WorkSpaces (native client)llm-create
Amazon/Amazon AppStream 2.0 (native client)llm-create
Amazon/Amazon DCV Clientllm-create
Range: 2018.3-2023.1

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/AWS-2025-001/nvd
docs.aws.amazon.com/appstream2/latest/developerguide/client-release-versions.htmlnvd
docs.aws.amazon.com/dcv/latest/adminguide/doc-history-release-notes.htmlnvd
docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.htmlnvd
docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.htmlnvd
docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000