CVE-2023-28807CWE-295
Bypass of ZIA domain fronting detection module through evasion technique
Medium · published January 31, 2024
What it is
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.
The record
Technical detail
- CVSS v3.1
- 5.1 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00345 · 26.8th percentile
- Weakness
- CWE-295 · Improper Certificate Validation
- Published
- 2024-01-31T19:16Z
EPSS history
Timeline