F033. Password change without identity check

The system allows a user to change their password without requesting the previous one or enforcing another identity verification mechanism.