# CVE-2018-16879 Tower: security channel is not set properly for AMPQ connection

**URL:** <https://forum.ansible.com/t/cve-2018-16879-tower-security-channel-is-not-set-properly-for-ampq-connection/29372>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [January 4, 2019, 3:38pm UTC](https://forum.ansible.com/t/cve-2018-16879-tower-security-channel-is-not-set-properly-for-ampq-connection/29372 "2019-01-04T15:38:34Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![xfy1dvr](https://avatars.discourse-cdn.com/v4/letter/x/ecae2f/32.png) [@xfy1dvr](https://forum.ansible.com/u/xfy1dvr)\
**Post date:** [January 4, 2019, 3:38pm UTC](https://forum.ansible.com/t/cve-2018-16879-tower-security-channel-is-not-set-properly-for-ampq-connection/29372/1 "2019-01-04T15:38:34Z")

</div>

Hi All,

Are we impacted by this CVE as of AWX 2.1.2 ? It seem like this was resolved with the pull ([https://github.com/ansible/awx/pull/1372](https://github.com/ansible/awx/pull/1372)) in Feb 2018. Would appreciate if someone can confirm.

---

<div class="post-metadata">

**Author:** ![rpetrell](https://avatars.discourse-cdn.com/v4/letter/r/b4bc9f/32.png) [@rpetrell](https://forum.ansible.com/u/rpetrell)\
**Post date:** [January 4, 2019, 4:35pm UTC](https://forum.ansible.com/t/cve-2018-16879-tower-security-channel-is-not-set-properly-for-ampq-connection/29372/2 "2019-01-04T16:35:04Z")

</div>

Hello,

You’re referring to this CVE?

[https://access.redhat.com/security/cve/cve-2018-16879](https://access.redhat.com/security/cve/cve-2018-16879)

The pull request you linked isn’t related to this CVE. AWX 2.1.2 is not affected by this CVE.