CBS Last.fm fixes admin password leakage via Symfony profiler

Last week, researchers at SecurityDiscovery.com, Sébastien “Seb” Kaul and Bob Diachenko discovered a web app running in “debug” mode, which belonged to CBS-owned Last.fm, a music streaming service.
Source: cyware.com