ISSUES WITH AMAZON WORKSPACES, AMAZON APPSTREAM 2.0, AND AMAZON DCV

Summary from the TLDR InfoSec newsletter

AWS has released a security bulletin on two new CVEs that affect native clients for Amazon Workspaces, Amazon AppStream, and Amazon DCV. These vulnerabilities allow the execution of a man-in-the-middle attack to connect to remote sessions. Amazon has released patched clients and urges users to update.