Amazon WorkSpaces Native Client Man-in-the-Middle Vulnerability

A man-in-the-middle vulnerability has been identified in the native clients for Amazon WorkSpaces, specifically when using the PCoIP protocol. This issue allows an attacker to intercept and access remote WorkSpaces sessions. The vulnerability affects the Windows, macOS, Linux, and Android clients of Amazon WorkSpaces.

Impact

Exploitation of this vulnerability could lead to unauthorized access to remote WorkSpaces sessions, allowing an attacker to intercept and potentially manipulate the session's content.

Remediation

Users can upgrade to the Amazon WorkSpaces Windows client version 5.22.1 or later, the macOS client version 5.22.1 or later, the Linux client version 2024.6 or later, or the Android client version 5.0.1 or later. Instructions for downloading the latest versions are available on the AWS website.