Empty repositories are getting listed Even if repository doesn't anonymous access

We have noticed that the direct URL to an empty repository without authentication is able to reach to the repository and providing a 200 response even though the tree browser doesn't show it.

Steps to reproduce:

Create a local repository.
Before adding anything to the repository or providing permissions to the anonymous user, try to access the direct URL to the index page of the repository.

ex: http://localhost:8081/artifactory/libs-release-local/

This could provide anyone the information about the existence of such a repository.

Workaround:

Disable "Allow Anonymous Access" in "General Security Settings"