7.5High
CVE-2025-0501Issue affecting Amazon WorkSpaces Clients (when running PCoIP protocol)
Description
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
Weakness (CWE):
CWE-295
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Amazon | WorkSpaces Client | 3.0.0 – < 5.22.1 |
References and patches
- https://aws.amazon.com/security/security-bulletins/AWS-2025-001/ vendor-advisory
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes patchrelease-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.html#osx-release-notes patchrelease-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes patchrelease-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-android-client.html#android-release-notes patchrelease-notes