Say, an attacker wants to perform a MitM but all he has available is the network traffic between a client and a server. He has no further information about the data or certificates than what's being exchanged over the network, with him in the middle.
Both client and server have a very limited set of trusted CAs, and will validate connections against the same, both on the client and the server side. It is impossible for the attacker to obtain or by other means steal a valid private key signed by a trusted CA.
Is a MitM possible under such circumstances?