An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.

The version of Amazon AppStream 2.0 installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Amazon DCV Client installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Amazon WorkSpaces installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
226455	Amazon AppStream 2.0 < 1.1.1332 MITM	Nessus	Windows	Local	high
215069	Amazon DCV Client <= 2023.1.6203 MITM	Nessus	Misc.	Local	high
215068	Amazon DCV Client <= 2023.1.8993 MITM	Nessus	Windows	Local	high
214961	Amazon WorkSpaces < 5.21.0 MITM	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2025-0500

high

Tenable Plugins

high

high

high

high