did not finish 4th vulnerability