I have an Android app that has a login page. While accessing from the browser, suggestions are shown for username field. This is fine. However, it shows suggestions for password field also. I just would like to know what sort of security issues that might arise.
It shows previously used passwords. There is no password manager feature. Looks like the data is cached as plain text. The field is of type text or password based on a flag. If type is text, password suggestions are shown. Does this look like a software bug or security issue?