Use the glide.basicauth.required.xsd property to designate if incoming XSD (XML Schema Definition) requests should require basic authentication.

Ensure the property glide.basicauth.required.xsd exists in the sys_properties table and is set to true.

More information

Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
AttributeDescription
Property name glide.basicauth.required.xsdglide.basicauth.required.xsd
Configuration type System Properties (/sys_properties_list.do)
Category API and web service
Purpose To enforce basic authentication on XSD requests.
Recommended value true
Security risk rating 5.3
Functional ImpactThis remediation enforces a combination of authentication methods, in the form of basic authentication and system level access control.
  • It performs this authentication while retrieving data from tables/pages in the form of XSD data on the instance.
  • It restricts any guest users who are currently accessing this data. If applicable, you may need to create a new account for users who need access to this content, with necessary access control permissions.

To learn more, see Non-interactive sessions.
Security risk (Moderate) Without appropriate authorization configured on the incoming XSD requests, an unauthorized user can get access to sensitive content/data on the target instance.
References Authentication