You are required to reset your password before proceeding.

My colleague set up a new member yesterday and when they logged in they got the message above.

I have never seen this before - is it a new feature?

I have logged in as the user and it is taking them to the K2 Contributor profile but I cannot see why.

All new members should first go to /cbprofileedit/userdetails!

I have tried changing the password (as user and admin) and it keeps giving the same message!

I deleted the user and re-entered the details and all is now fine, but still worried about how this issue occurred!

Ok, more details as I have been able to replicate the issue, that was not there a few days ago.

My colleague sets up new members s follows:
In admin, create new user
In front end, login as admin, find new member and upgrade, confirming payment details and receipt of funds at the end.

If I create a new member in the front end, when I am not logged in, all works OK.

Are you using CB > User Management to create your users? Do not use Users > Manage as it causes Joomla and CB to go out of sync with one another. Ensure the Reset Password field is not set to Yes when creating a user if you do not want to force the new user to supply their own password.

Yes, we are using CB user, not J! to set up new users.

I never noticed/knew there was reset pw switch, but this has never been an issue before (I assume it was switched to no).

Why can't the user and admin change the pw and why doesn't it go to the CB user page to allow change (it would not leave the K2 user page)?