Privilege escalation via unauthorized administrator account modification

Privilege escalation in Cisco BroadWorks CommPilot allows remote authenticated users to assume system administrator privileges. The web management interface fails to authorize account-modification operations and accepts crafted requests that alter an existing system administrator account. Exploitation requires read-only system administrator credentials and deployments that enforce that role through the web interface; the attacker gains the targeted account's privileges.