SSRF Vulnerability in Java TLS Handshakes Causes DoS Risk

Tenable Research has identified a server-side request forgery (SSRF) vulnerability in Java's handling of client certificates during TLS handshakes. This vulnerability can be exploited in certain configurations to create a denial-of-service (DoS) condition, affecting systems that rely on the TLS protocol for secure communication. The issue highlights the importance of proper configuration in maintaining security.