CVE-2018-16879 Tower: security channel is not set properly for AMPQ connection

Archives AWX Project
1

Hi All,

Are we impacted by this CVE as of AWX 2.1.2 ? It seem like this was resolved with the pull (https://github.com/ansible/awx/pull/1372) in Feb 2018. Would appreciate if someone can confirm.

2

Hello,

You’re referring to this CVE?

https://access.redhat.com/security/cve/cve-2018-16879

The pull request you linked isn’t related to this CVE. AWX 2.1.2 is not affected by this CVE.