CVE-2018-10863

CVE-2018-10863 describes an information disclosure vulnerability in Red Hat Certification 7, where the /rhcert-transfer URL improperly lists the contents of the /var/www/rhcert/store/transfer directory. This flaw allows an unauthenticated attacker to enumerate sensitive files and directories. With a CVSS v3.1 score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, leading to high confidentiality impact but no integrity or availability impact. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there any evidence of active exploitation, community discussion, or media coverage.