Tenable Discovers SSRF Vulnerability in Java TLS Handshakes That Creates DoS Risk

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SSRF Vulnerability in Java TLS Handshakes Discovered by Tenable Tenable Research has identified a server-side request forgery (SSRF) vulnerability in Java's handling of client certificates during TLS handshakes. This vulnerability poses a risk of denial-of-service (DoS) attacks, potentially affecting applications that rely on Java for secure communications. Organizations using Java may need to assess their systems for this vulnerability. 1 sources 25