Cyber Security News

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific versions of its native clients for Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon NICE DCV.

Identified as CVE-2025-0500 and CVE-2025-0501, these vulnerabilities present significant risks, compelling AWS to recommend urgent updates to protect user data.

Overview of the Vulnerabilities

CVE-2025-0500

CVE-2025-0500 affects users of Amazon WorkSpaces and Amazon AppStream 2.0 when utilizing the Amazon NICE DCV protocol.

This vulnerability could allow malicious actors to execute man-in-the-middle attacks, enabling unauthorized access to remote WorkSpaces, AppStream, or DCV sessions.

Investigate Real-World Malicious Links & Phishing Attacks With Threat Intelligence Lookup - Try for Free

The versions affected by this vulnerability include Amazon WorkSpaces Windows client 5.20.0 or earlier, macOS client 5.20.0 or earlier, and Linux client 2024.1 or earlier.

Additionally, the vulnerability impacts the Amazon AppStream 2.0 Windows client version 1.1.1326 or earlier, as well as Amazon DCV Windows client version 2023.1.8993 or earlier, macOS client version 2023.1.6203 or earlier, and Linux client version 2023.1.6203 or earlier for all supported distributions.

To address this vulnerability, AWS recommends that users upgrade to the following versions or later: Amazon WorkSpaces Windows client 5.21.0 or later, macOS client 5.21.0 or later, and Linux client 2024.2 or later.

For Amazon AppStream 2.0, users should update to Windows client version 1.1.1332 or later.

For Amazon DCV, the recommended updates are Windows client version 2023.1.9127 or later, macOS client version 2023.1.6703 or later, and Linux client version 2023.1.6703 or later for all supported distributions.

CVE-2025-0501

The second vulnerability, CVE-2025-0501, applies specifically to Amazon WorkSpaces when using the Amazon PCoIP protocol.

Similar to CVE-2025-0500, this issue could enable attackers to perform man-in-the-middle attacks, compromising remote WorkSpaces sessions.

Affected versions for this vulnerability include Amazon WorkSpaces Windows client 5.22.0 or earlier, macOS client 5.22.0 or earlier, Linux client 2024.5 or earlier, and Android client 5.0.0 or earlier.

To mitigate the risks associated with CVE-2025-0501, users are advised to upgrade to the following versions or later: Amazon WorkSpaces Windows client 5.22.1 or later, macOS client 5.22.1 or later, Linux client 2024.6 or later, and Android client 5.0.1 or later.

Recommendations for AWS Users

In light of these vulnerabilities, AWS emphasizes the critical importance of maintaining updated software versions to protect sensitive data and ensure a secure working environment.

The company has proactively communicated with its customers regarding the end of support for the affected versions, reinforcing the urgency for users to upgrade.

Organizations utilizing AWS services should adopt best practices by regularly implementing updates and conducting vulnerability assessments.

Staying informed through AWS advisories and security bulletins is vital for maintaining robust security postures in cloud environments.

Ensuring that all clients operate on supported versions will not only help mitigate potential risks but also enhance overall security protocols within the organization.

Integrating Application Security into Your CI/CD Workflows Using Jenkins & Jira -> Free Webinar

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms. Phishing…

2 hours ago

New Tool Unveiled to Scan Hacking Content on Telegram

A Russian software developer, aided by the National Technology Initiative, has introduced a groundbreaking AI…

2 hours ago

PoC Exploit Released for Ivanti Connect Secure RCE Vulnerability

A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables…

5 hours ago

Let’s Encrypt Unveils Six-Day Certificate and IP Address Options for 2025

Let’s Encrypt has announced plans to introduce six-day certificate options and support for IP address…

6 hours ago

Bug Bounty Bonanza: $40,000 Reward for Escalating Limited Path Traversal to RCE

As a dedicated bug bounty hunter with an enviable track record on BugCrowd, Abdullah Nawaf, Full…

6 hours ago

BitMEX Fined $100 Million for Violating Bank Secrecy Act

In a significant legal development, HDR Global Trading Ltd., operating under the name BitMEX, has…

7 hours ago