Recover after losing Ubuntu password

Simple procedure allows you to set a new password seemingly without any knowledge of the previous one. Actually this sounds like a major security vulnerability as anyone can break into your system with this method.