Description
In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zscaler | ZIA | < 6.2r.290 | 6.2r.290 |