backup server vulnerability