Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-0501
PUBLISHED
More InfoOfficial Page
Assigner-AMZN
Assigner Org ID-ff89ba41-3aa1-4d27-914a-91399e9639e5
View Known Exploited Vulnerability (KEV) details
Published At-15 Jan, 2025 | 18:21
Updated At-06 Feb, 2025 | 21:29
Rejected At-
▼CVE Numbering Authority (CNA)
Issue affecting Amazon WorkSpaces Clients (when running PCoIP protocol)

An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.

Affected Products
Vendor
Amazon
Product
WorkSpaces Client
Platforms
  • Windows
  • MacOS
Default Status
unaffected
Versions
Affected
  • From 3.0.0 before 5.22.1 (semver)
Vendor
Amazon
Product
WorkSpaces Client
Platforms
  • Linux
Default Status
unaffected
Versions
Affected
  • From 3.0.0 before 2024.6 (semver)
Vendor
Amazon
Product
WorkSpaces Client
Platforms
  • Android
Default Status
unaffected
Versions
Affected
  • From 3.0.1 before 5.0.1 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-295CWE-295 Improper Certificate Validation
Metrics
VersionBase scoreBase severityVector
4.07.7HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3.17.5HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-94CAPEC-94 Adversary in the Middle (AiTM)
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://aws.amazon.com/security/security-bulletins/AWS-2025-001/
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found