# CVE-2018-1002105: Kubernetes apiserver WebSocket Upgrade Vulnerability

DevFeed: [CVE-2018-1002105: Kubernetes apiserver WebSocket Upgrade Vulnerability](<https://devfeed.tech/articles/cve-in-the-heart-of-kubernetes-apiserver-29752.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/kubernetes-websocket-upgrade-security-vulnerability/>)

Author: info@goteleport.com (Abraham Ingersoll)

Published: 2018-12-05T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [API](<https://devfeed.tech/topics/api.md>), [WebSocket](<https://devfeed.tech/topics/websocket.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Kubernetes Services](<https://devfeed.tech/topics/kubernetes-services.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cve](<https://devfeed.tech/tags/cve.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [websocket](<https://devfeed.tech/tags/websocket.md>)

## AI overview

This article explains the root cause and impact of CVE-2018-1002105, a Kubernetes apiserver vulnerability involving WebSocket connection upgrades and proxying to aggregate services. It also presents a program for testing whether clusters are affected.

## Source excerpt

An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected