Search vulnerabilities

Results 1

Export CSV
CVE-2023-28807

Bypass of ZIA domain fronting detection module through evasion technique

In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors