Security Advisory
CVE-2023-28807
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.