id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc
13466,Security vulnerability in Boost Interprocess,Corelogic RiskModel <riskmodel-all.india@…>,Ion Gaztañaga,"Greetings,

Our security team has flagged:
if(!SetSecurityDescriptorDacl(&sd, true, 0, false))
in interprocess\detail\win32_api.hpp as a ""high-priority"" vulnerability citing:

""Objects that have null DACLs can have their security descriptors altered by malicious users so that no one has access to the object. Even if everyone needs access to an object, the object should be secured so that only administrators can alter its security"".

We've been told to bring this to your attention; Can you please let us know when it would be feasible to fix?",Bugs,new,To Be Determined,interprocess,Boost Development Trunk,Problem,,security windows DACL,