An improper authorization check in Apache Answer versions through 2.0.2 allows authenticated users to view metadata of non-public questions via the similar-question search feature. This vulnerability exposes sensitive information that should be restricted. The issue is fixed in version 2.0.3.