CVE-2022-1805

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients

published July 28, 2022

CVSS
—
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM (Man in the Middle) between a zero client and AWS session provisioner in the network. This issue is only applicable when connecting to an Amazon Workspace from a PCoIP Zero Client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00635 · 49.8th percentile
Published
2022-07-28T14:21Z
EPSS history
Timeline
  • 28 JUL 14:21Z
    When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients
    cvelistv5