CVE-2018-16588

CVE-2018-16588 is a privilege escalation vulnerability in the SUSE useradd utility, affecting SUSE Linux Enterprise 12 and 15. It arises because non-existent intermediate directories created during user addition are set with world-writable permissions (0777). This allows local attackers to exploit the misconfiguration for privilege escalation and other attacks. The vulnerability has a CVSSv3 score of 7.8 (High) due to its low attack complexity and significant impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.