Steps to reproduce :

1. Login as admin
2. Go to configuration menu > Setting 
3. Password strength is strong 
4. Go to account > Customer 
5. Click on create button
6. Fill up details and save
7. Login as customer
8. Go to my account > Change password 
9. Fill up old password = Test@123, new password = 12, confirm password = 12
10. Click on submit.

Actual result :- Verify password changed successfully without any password strength  "strong" validation. 

Expected result :- password strength  "strong" should be working fine.

It should not be accept weak password.

It should be validate according to password's length, some special, lower/Upper character, numeric character etc. If password not match according to password strength  "strong" validation then it should be display error message according to mention above conditions.

See Latest  Videos.

Note:- This issues are also occurred in community v5.0 version.