id	summary	reporter	owner	description	type	status	milestone	component	version	severity	resolution	keywords	cc
13466	Security vulnerability in Boost Interprocess	Corelogic RiskModel <riskmodel-all.india@…>	Ion Gaztañaga	"Greetings,

Our security team has flagged:
if(!SetSecurityDescriptorDacl(&sd, true, 0, false))
in interprocess\detail\win32_api.hpp as a ""high-priority"" vulnerability citing:

""Objects that have null DACLs can have their security descriptors altered by malicious users so that no one has access to the object. Even if everyone needs access to an object, the object should be secured so that only administrators can alter its security"".

We've been told to bring this to your attention; Can you please let us know when it would be feasible to fix?"	Bugs	new	To Be Determined	interprocess	Boost Development Trunk	Problem		security windows DACL