The use of ``++DUMP++`` and ``++DUMP TRANSACTION++``, while potentially useful during development and debugging, could expose system information to attackers and should not be used in production.


== Noncompliant Code Example

----
EXEC CICS DUMP TRANSACTION  *> Noncompliant
  DUMPCODE('dumpfile')
  FROM (area-to-dump)
  LENGTH (data-to-dump)
END-EXEC.
----


== See

* https://www.owasp.org/index.php/Top_10-2017_A3-Sensitive_Data_Exposure[OWASP Top 10 2017 Category A3] - Sensitive Data Exposure
* http://cwe.mitre.org/data/definitions/497[MITRE, CWE-497] - Exposure of System Data to an Unauthorized Control Sphere

