Client Vpn
Approved changes feed: RSS · Atom
cpe:2.3:a:aws:client_vpn:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aws (e6707f00-6abb-51df-808c-9e3417305027) |
|---|---|
| Product | Client Vpn (8c5e59c9-3ee9-5691-bf58-f11c87aa6ab0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8069 |
vulnerable | 2026-06-03 15:13:42.182440 |
Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client
HIGH (7.8)
During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If an admin user starts the AWS Client VPN client installation process, that code could be executed with root-level privileges. This issue does not affect Linux or Mac devices.
We recommend users discontinue any new installations of AWS Client VPN on Windows prior to version 5.2.2.
Published: 2025-07-23T15:41:40.310Z
Updated: 2025-10-14T17:56:39.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11462 |
vulnerable | 2026-06-03 14:58:36.096821 |
Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client
HIGH (7.8)
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a symlink from a client log file to a privileged location. On log rotation, this could lead to code execution with root privileges if the user made crafted API calls which injected arbitrary code into the log file. We recommend users upgrade to AWS VPN Client for macOS 5.2.1 or the latest version.
Published: 2025-10-07T19:44:25.608Z
Updated: 2026-02-26T17:48:10.825Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.