CVE-2023-28807

Name of the Vulnerable Software and Affected Versions Zscaler Internet Access (ZIA) (affected versions not specified)

Description The issue is related to a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) in Zscaler Internet Access (ZIA), which enables attackers to evade network security controls by hiding their communications within legitimate traffic. This can be exploited to perform a man-in-the-middle attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.