Is this config vulnerable?