Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-0500

Issue affecting Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV clients

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.21.0, 2024.2, 1.1.1332, 2023.1.6703, 2023.1.9127
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Amazon WorkSpaces Client

    From 5.0.0 · fixed in 5.21.0

  • Amazon WorkSpaces Client

    From 2023.0 · fixed in 2024.2

  • Amazon AppStream 2.0 Client

    From 1.1.1025 · fixed in 1.1.1332

  • Amazon DCV Client

    fixed in 2023.1.6703

  • Amazon DCV Client

    From 2020.2.7459 · fixed in 2023.1.9127

  • Amazon WorkSpaces Client

    From 5.5.0 · fixed in 5.21.0

  • Amazon DCV Client

    From 2020.2.2078 · fixed in 2023.1.6703

References 6

aws.amazon.com

docs.aws.amazon.com