CVE-2025-0500 – Issue affecting Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV clients

https://notcve.org/view.php?id=CVE-2025-0500

15 Jan 2025 — An issue in the native clients for Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle. An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle. • https://aws.amazon.com/security/security-bulletins/AWS-2025-001 • CWE-295: Improper Certificate Validation •