Linuxfabrik monitoring-plugins, used for monitoring systems like Icinga and Nagios, have a vulnerability in versions 6.0.0 and earlier where the redfish-* plugins build request URLs insecurely by concatenating an operator-supplied base URL with @odata.id links from responses. This improper input validation (CWE-20) can be exploited by a malicious or compromised BMC to redirect authenticated Redfish requests, leading to disclosure of sensitive authentication tokens such as X-Auth-Token or HTTP Basic credentials. The CVSS 4.0 score is 8.3 (high severity), indicating network attack vector, low attack complexity, partial attack traceability, and high confidentiality impact.

An attacker controlling or compromising the BMC can redirect Redfish requests to attacker-controlled URLs, resulting in disclosure of sensitive authentication credentials (X-Auth-Token or HTTP Basic credentials). This can lead to unauthorized access to monitoring data or systems relying on these credentials. The vulnerability affects confidentiality but does not directly indicate impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor vendor channels for updates and consider restricting access to BMC interfaces to trusted entities to reduce risk until a fix is available.