CVE-2023-28807
Bypass of ZIA domain fronting detection module through evasion technique
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.
CVSS 3.1 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products