Previous Topic: 04010: CICS Storage Violation Detected

Next Topic: 04012: CICS LSR String Wait

04011: CICS Abnormal Condition Transaction


FILE:             CICS Incident File
SAS FILE NAME:    DETAIL.CICCIN01
SOURCE LOCATION:  prefix.MICS.USER.SOURCE(DYCICEXC)

SEVERITY:  Critical             (SEVERITY='C')
MANAGEMENT AREA:  Performance   (MGMTAREA='PERFORMANCE')

PURPOSE:  Identifies a possible intentional attempt to gain
unauthorized access to the CICS system.

RATIONALE:  CICS security violations can take many forms.
All unsuccessful attempts to access transactions which the
user is not authorized to access will result in a CSAC
Abnormal Condition Transaction monitor record.

DEFINITION:  This exception is noted when the monitor record
for any CSAC transaction is processed.

EXCEPTION STATEMENTS:  The SAS statements identifying the
exception situation and describing the condition are stored
in the source member named in SOURCE LOCATION and are
described below.

**************************************************
**  04011
**  CICS ABNORMAL CONDITION TRANSACTION
*;
IF CINCODE = 11
THEN DO;
EXCCODE='04011'; SEVERITY='C'; MGMTAREA='SECURITY';
EXCDESC1 = CINTEXT;
EXCDESC2= 'TRAN=' || TRANCODE ||
        ' TERM=' || TERMINAL ||
        ' OPER=' || OPERID;
LINK HIT;
END;

THRESHOLD MODIFICATION:  None required