CVE-2025-0501

Description

An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.

Affected Platforms

Weakness Type

CWE-295

References

• https://aws.amazon.com/security/security-bulletins/AWS-2025-001/
• https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-androi…
• https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-…
• https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-osx-cl…
• https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-window…