An issue in the native clients for Amazon WorkSpaces Clients when running PCoIP protocol may allow an attacker to access remote sessions via man-in-the-middle.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Potential Mitigations
References