CVE-2023-28807 — Bypass of ZIA domain fronting detection module through evasion technique
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding t…
Published: 2024-01-31 · CVSS: 5.1 · CVSS 3.1
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7