CVE-2022-1805

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM (Man in the Middle) between a zero client and AWS session provisioner in the network. This issue is only applicable when connecting to an Amazon Workspace from a PCoIP Zero Client.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-18066.1Cross-site Scripting (XSS) - Reflected in GitHub repository rtxteam/rtx prior to checkpoint_2022-05-18.CVE-2022-18077.2Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.CVE-2022-18088.8Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.CVE-2022-18097.8Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-18104.3Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.CVE-2022-18115.4Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.CVE-2022-18129.8Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.CVE-2022-18139.8OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.CVE-2022-18144.8The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2022-18157.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.CVE-2022-18165.4A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/publCVE-2022-18175.4A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /
CVE-2022-1805: High severity, CVSS 8.1 | Vulnix