Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28807

In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.

Published

2024-01-31T20:15:44.903

Last Modified

2024-11-21T07:56:03.310

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-295
  • Type: Primary
    CWE-295
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zscaler secure_internet_and_saas_access < 6.2r.290 Yes
References