CVE-2023-28807

Publication date

2024-01-31 19:16:59

Family

Zscaler

State

PUBLISHED

Description

In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hellos Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.