Language: Java
Label: safe
CWE: CWE-338 \u2014 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

Code:
	public static String generateSecret(int count) {
		return RandomStringUtils.random(count, 0, 0, true, true, null, 
				new SecureRandom());		
	}