Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.7

Amazon WorkSpaces PCoIP Client Man-in-the-Middle Attack Risk

CVE-2025-0501 · published 1 year ago
Summary

An attacker may intercept and access remote sessions on Amazon WorkSpaces using the PCoIP protocol. This could allow unauthorized access to sensitive data and systems. Update your WorkSpaces clients with the latest version to prevent this risk.

Original advisory text
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published15 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-0501 · NVD
Track software like this
Free during beta