BugZero | Palo Alto Networks BugID PAN-120965 - Fixed an issue where certificate revocation list (...

Palo Alto Networks - Defect ID: PAN-120965

Fixed an issue where certificate revocation list (CRL) and Online Certificate Status Protocol (OCSP) checks did not respond as expected when you configured Block session if certificate status is unknown .

Palo Alto Networks - Defect ID: PAN-120965

Fixed an issue where certificate revocation list (CRL) and Online Certificate Status Protocol (OCSP) checks did not respond as expected when you configured Block session if certificate status is unknown .

Last updated on July 22nd, 2025

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 8.1.11

The earliest recollection of this bug is traced back to PAN-OS 8.1.12 - July 22, 2025. This bug is fixed in PAN-OS versions 8.1.12. Fixed an issue where certificate revocation list (CRL) and Online Certificate Status Protocol (OCSP) checks did not respond as expected when you configured Block session if certificate status is unknown . For more information: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-addressed-issues/pan-os-8-1-12-addressed-issues

Change history

No changes to display

2025-07-22 Added: 8.1.11

Top Palo Alto Networks Defects

6.3Defect ID: PAN-325786
Fixed an issue where content updates with active traffic failed.
6.3Defect ID: PAN-302085
Fixed an issue where network values were not displayed in Panorama with the error message There is no value for the selected item . This was due to the device group passing vsysName in Panorama.
6.3Defect ID: PAN-264349
Fixed an issue where the Management Processor Card (MPC) on modular firewalls became unresponsive when a disk drive entered a low-power state and failed to wake up.
6.3Defect ID: PAN-299161
Fixed an issue where the bytes number overflowed for a specific application, which caused Network Monitor graphs to display an unexpectedly large volume of traffic.
6.3Defect ID: PAN-293561
Fixed an issue where users with a custom role-based administrator role were unable to download the GlobalProtect client application via the web interface even when the GlobalProtect Client option was enabled in the admin role profile.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-120965

Fixed an issue where certificate revocation list (CRL) and Online Certificate Status Protocol (OCSP) checks did not respond as expected when you configured Block session if certificate status is unknown .

Palo Alto Networks - Defect ID: PAN-120965

Fixed an issue where certificate revocation list (CRL) and Online Certificate Status Protocol (OCSP) checks did not respond as expected when you configured Block session if certificate status is unknown .

Last updated on July 22nd, 2025

BugZero Risk Score6.3 Medium

Bug Details

Disclaimer

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.3 Medium