ajenti.plugin.core has race conditions in 2FA

Impact

If the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication.

Patches

This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.