medium5.1
CVE-2023-28807
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security co…
Impact
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zscaler | Secure Internet And Saas Access | before 6.2r.290 |
Weakness classification
References
- NVD record
- CVE.org record
- https://help.zscaler.com/zia/configuring-advanced-settings#dns-optimization
- https://help.zscaler.com/zia/configuring-advanced-settings#domain-fronting
- https://help.zscaler.com/zia/configuring-advanced-settings#dns-optimization
- https://help.zscaler.com/zia/configuring-advanced-settings#domain-fronting