While being an admin user, I noticed you cannot change your own password unless you know the current password (like it should be)

BUT

you CAN change another Admin’s password without knowing that account’s password ever! This is a Security oversight for sure !

You almost always can also run something like OphCrack too …