High severity7.5NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026
CVE-2025-0500
CVE-2025-0500
Description
An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- aws.amazon.com/security/security-bulletins/AWS-2025-001/nvd
- docs.aws.amazon.com/appstream2/latest/developerguide/client-release-versions.htmlnvd
- docs.aws.amazon.com/dcv/latest/adminguide/doc-history-release-notes.htmlnvd
- docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.htmlnvd
- docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.htmlnvd
- docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.htmlnvd
News mentions
0No linked articles in our index yet.