[www.drive2.ru] Insufficient Security Configurability - The user's can set an existing password as a new password.

Summary

An application is allowing user to set new password same as that of the old password. Passwords are entirely user's responsibility but As the old password may be exposed to other users, depending on the security password policy application, it should not be possible to set a new password value using the same old password value.

As a weak password policy issue, An application is allowing user to set new password same as that of the old password. Passwords are entirely user's responsibility but As the old password may be exposed to other users, depending on the security password policy application, it should not be possible to set a new password value using the same old password value.