[Bug 1162761] VUL-1: CVE-2019-15612: nextcloud: a bug causes pending 2FA logins to not be correctly expired when the password of the user is reset.