Thanks for your continuous help.
Observed that issue not only changing from wp-login to wp-login.php.
localhost/wp-login/index.tes (even incorrect TES)
All above links open login page and able to login. Also, I noticed web address in browser (chrome) not changing.
Hacker or Attacker can get access to login screen and can try brute Force attack against the website.
As you know, wordpress offers many plugin which helps to protect wordpress website from hackers or attackers by direct default wp-login.php and wp-admin to 404, but those plugin can't help in protect bitnami LAMP wordpress installer in live/production due this issue.
According to me this issue is high priority.
I suggest Bitnami to fix this issue soon before some hacker or attackers found this.
Kindly let me know your feedback.