HCL Launch stores user credentials in plain clear text which can be read by a local user.
CWE-256, CWE-522