This template is ONLY for reporting security bugs. Please use a different
template for other types of bug reports.

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs


VULNERABILITY DETAILS
Password of any user is most sensitive data which need to be handled correctly
Once you logged in using show password, the password text is saved.
Next time when you try logging in you can see the complete password text.

So if the user has logged in using show password anytime then the password can be retrieved very easily .

VERSION
Chrome Version: Chrome 47.0.2526.83
Operating System: 4.4.2; SHV-E250K Build/K0T49H

REPRODUCTION CASE
1> Open Chrome Browser in Android Mobile
2> Enter URL facebook.com
3> Type any valid email Id
4> Type valid passord with "Show password" enabled
5> log in
6> logout
7> Again try to login and check password is visible

 

Deleted: Screenshot_2016-03-08-22-49-17.png 142 KB

	Screenshot_2016-03-08-22-49-17.png 142 KB View Download

Deleted: Screenshot_2016-03-08-22-53-31.png 70.5 KB

	Screenshot_2016-03-08-22-53-31.png 70.5 KB View Download