vulnerable client