In versions 15.0.0-15.1.0.1 14.1.0-14.1.2.3 13.1.0-13.1.3.4 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2 the BIG-IP Client or Server SSL profile ignores revoked certificates even when a valid CRL is present. This impacts SSL/TLS connections and may result in a man-in-the-middle attack on the connections.