CVE-2023-28807

In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello’s Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.

Date published : 2024-01-31

https://help.zscaler.com/zia/configuring-advanced-settings#dns-optimization

https://help.zscaler.com/zia/configuring-advanced-settings#domain-fronting