change password does not require the old password
I just was surprised to see the change password dialog was so fast and tried it again with wrong credentials and it was just as fast but it actually changed the password. actually entering the old password is not even required.
Statement from Kunagi Team
This is only the case for the admin user, since he can change passwords for all users. We will change this, so he can only reset passwords to the default.
Status
Issue is closed for Release 0.24.