SolarWinds has patched a hard-coded key that let unauthenticated attackers run code in Access Rights Manager.