When passing a password into a client-side UDP process via the system variable [password] it fails if the password is the string "password". For example, if the UDP is defined as
hcp -b [broker] -st [state] -en [project] -usr [user] -pw [password]
and the user's password is "password" it will fail with exit code 5 and the hcp.log will show incorrect login. If the password is anything else, within specified limits regarding use of special characters, it works fine.
Any System Variable value that matches the same System Variable name will cause a problem with UDPs (for example, a [project] called "project" etc.). Development reviewed this finding and concluded this is working as designed. Therefore you should not name a project "project", or name a state "state", or use "password" for your harvest password, etc. Details about the System Variables used by SCM can be found in Appendix B of the SCM Administrators Guide.