Description
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Amazon | WorkSpaces Client | 3.0.0 – < 5.22.1, 3.0.0 – < 2024.6, 3.0.1 – < 5.0.1 | 5.22.1 |
References
- https://aws.amazon.com/security/security-bulletins/AWS-2025-001/ vendor-advisory
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes patch release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-client.html#osx-release-notes patch release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes patch release-notes
- https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-android-client.html#android-release-notes patch release-notes