Ansible Tower CVE-2018-16879 Information Disclosure Vulnerability

Bugtraq ID:	106310
Class:	Configuration Error
CVE:	CVE-2018-16879
Remote:	Yes
Local:	No
Published:	Dec 20 2018 12:00AM
Updated:	Dec 20 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat Ansible Tower 3 for RHEL 7 0 Ansible Ansible Tower 3.2.6 Ansible Ansible Tower 3.1.8 Ansible Ansible Tower 3.0.4 Ansible Ansible Tower 2.0.5 Ansible Ansible Tower 2.0.2 Ansible Ansible Tower 0
Not Vulnerable:	Ansible Ansible Tower 3.3.3

Ansible Tower CVE-2018-16879 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Ansible Tower CVE-2018-16879 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Ansible Tower CVE-2018-16879 Information Disclosure Vulnerability

References:

• Ansible Tower Release Notes (Redhat Ansible)
  
• Redhat Ansible Home Page (Redhat Ansible)
  
• Redhat Ansible Tower Product Page (Redhat Ansible)
  
• CVE-2018-16879 Tower: security channel is not set properly for AMPQ connection (Redhat)
  
• Red Hat Bugzilla �?? Bug 1658394 (Red Hat Bugzilla)