Not a bug, but a privacy feature.
As an author, you have access rights to modify other authors' info. When you load another author's page, the password field is filled in, with asterisks. Viewing page source uncovers these asterisks, revealing the author's password. This is a request to prevent the automatic filling in of the password box.