RSA EnVision suffers from a remote password hash retrieval vulnerability. Versions 3.5.0, 3.5.1, 3.5.2, and 3.7.0 are all affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72296/rsaenvision-disclose.txt
Source: https://packetstormsecurity.com/files/72296/rsaenvision-disclose.txt.html