In JotUrl 2.0, is possible to bypass security requirements during the password change process.
CWE-287