Account set with password not required (weakness introduction)

Detects scenarios where an attacker set an account with password not required to perform privilege escalation attack.