Last modified: 2013-06-05 13:52:00 UTC
Repro: 1. Request a password reset for User:A 2. Log in to the wiki as User:B 3. Go to [[Special:UserLogin]] 4. Try to log in as User:A using the password in the mail 5. Follow the instruction to set a new password for User:A Result: I'm still logged in as User:B. Expected: I'm now logged in as User:A.
btw the instruction in step 5 is: You logged in with a temporary emailed code. *To finish logging in*, you must set a new password here:
Shamless plug: one way to fix this is to get rid of temporary passwords entirely (https://gerrit.wikimedia.org/r/27472)