It's not really a vulnerability, though. It's an attack vector.